281 casos · pág. 4/15
Court documents analyzed by NPR indicate that TikTok employees repeatedly warned leadership about risks to minors, including sexual exploitation in live streams and exposure to harmful content. An internal investigation reportedly found children aged 13 to 15 in 112,000 TikTok Live videos in January 2022 alone, with risks of grooming by p…
Huntress researchers identified a fake page impersonating the WatchGuard download portal that harvested VPN server addresses, usernames and passwords before offering the legitimate Mobile VPN with SSL installer. The investigation began after suspicious activity involving an administrator at a managed service provider (MSP), who found the …
Ticketmaster confirmed a security incident that exposed personal data of customers in Brazil who bought tickets in 2025. The company notified affected users by email and reported the case to the Brazilian data protection authority (ANPD). According to the company, the incident involved a third-party data analytics tool. The investigation,…
Booz Allen Hamilton published a whitepaper, From Digital to Physical: The AI Threat Is Here, on controlled tests of frontier AI models in its isolated OT cybersecurity lab in Chantilly, Virginia. With limited human direction, the models achieved all eight test objectives. They moved from perimeter compromise to control-zone actions in jus…
CISA, the NSA and NIST released a 14-page voluntary guidance document, Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. It covers "SI control incidents", in which one or more super intelligence (SI) agents take uninstructed actions that undermine the controls, policies or security measures t…
Industrial Cyber interviews OT security executives from Dragos, OMV Petrom, Thales and an energy-sector former CISO on how upstream oil and gas operators secure dispersed, remote and often unmanned sites. The article cites the Dragos 2026 OT/ICS review: 29% of oil and gas cases showed poor IT/OT segmentation, the highest of any sector, an…
A Semperis survey, covered by HIPAA Journal, finds ransomware groups increasingly threatening victims' employees and their families as the share of victims paying ransoms falls from 78% in 2024 to 69% in 2025 and 59% in 2026. Of the attacks surveyed, 37% involved threats against friends or family of staff, and 41% of respondents said they…
Mid Florida Dermatology & Plastic Surgery, a 33-location medical group in central Florida, reported to the HHS Office for Civil Rights a breach affecting 85,585 individuals. An unauthorized third party accessed its network from March 26 to March 30, 2026, and patient files may have been viewed or acquired. Two other healthcare incidents w…
Boston Children's Health Physicians (BCHP) and its managed IT provider XTIUM (formerly Axispoint Technology Solutions Group) settled with the New York and Connecticut Attorneys General over an August 2024 breach affecting almost 890,000 individuals. The settlement carries a $4 million penalty, of which $2.7 million is payable (New York $2…
An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from Octo…
Federal prosecutors charged Abdulrahman Alfozan, a 35-year-old Saudi national and US permanent resident who joined OpenAI in July 2025, with using a device to intercept oral communications. He allegedly planted a covert audio recorder in an executive-only conference room no later than 28 September 2026. OpenAI's countersurveillance sweep …
Documents released by the defense team in the federal case against the Minnesota 15 show that a joint task force of six local officers and eight HSI Chicago agents surveilled an April 2 talk at the Co-Prosperity gallery in Chicago. The talk was part of a Crimethinc national tour in which Twin Cities anarchists discussed resisting Operatio…
A US federal magistrate judge in San Francisco ordered former OpenAI engineer Abdulrahman Alfozan to remain in custody, citing flight risk. Prosecutors allege he planted a covert audio recording device, hidden in toilet paper behind a TV, in an executive conference room used for confidential meetings. OpenAI found the device in late Septe…
Researchers at Vedere Labs (Forescout Research) reported on October 14 that they found ROMULUS, a new multi-payload shared ClickFix delivery platform, while investigating an incident. The same malware from a separate ClickFix campaign was linked to another server tied to that incident, and that server hosted the ROMULUS panel. ROMULUS is …
Microsoft, working with industry partners and Japanese police, disrupted a Chinese-language phishing-as-a-service (PhaaS) ecosystem centered on Yam Store, an underground marketplace tracked as Storm-3119. The phishing kits sold there were responsible for over a billion phishing emails and texts sent to more than 75,000 organizations since…
The UK Information Commissioner's Office (ICO) has issued a reprimand and an enforcement notice to the Metropolitan Police Service (MPS) over governance failures in its use of the third-party Auror retail crime intelligence-sharing platform. Between March 2023 and September 2024, MPS officers and staff used Auror without formal approval, …
Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-rel…
A cybersecurity incident at US government contractor BAE Systems has knocked out the systems behind the Bankruptcy Noticing Center (BNC), which generates and distributes bankruptcy notices for all federal bankruptcy courts in the US. The Administrative Office of the US Courts (AOUSC) confirmed on October 15 that BNC IT systems and website…
The Semperis 2026 Ransomware Risk Report, published on October 14, warns that ransomware operators are increasingly threatening the physical safety of CISOs, executives and other senior staff at victim organizations to force payment. The report says a quarter of ransomware campaigns now involve psychological or physical threats against em…
Conduent has agreed to pay $80m to settle a class action over the October 2024 cyber incident that exposed personal and health data of roughly 62 million people. The filing was submitted to the US District Court for the District of New Jersey on October 16, 2026, and confirmed in an 8-K filing with the SEC. The attack was allegedly carrie…
