892 casos · pág. 5/45
CrowdStrike reports that the cybercriminal group SLIM SPIDER breached a Brazilian financial institution in late March 2026 to obtain credentials and information tied to digital assets. The group did not attack Pix or the Central Bank directly. It targeted the cloud environments that banks and fintechs use. CrowdStrike also recorded a 171%…
Dispel announced the Dispel Zero Trust Engine for OEMs, a remote access platform for OEMs and machine builders that service customers' industrial equipment. It is already used at multiple OEMs, including ABB under ABB Care. The vendor cites Verizon's 2026 Data Breach Investigations Report, which says 61 percent of manufacturing breaches i…
In a World Economic Forum article, Etay Maor of Cato Networks argues that traditional cybersecurity frameworks must evolve to address three forms of AI misuse: humans using AI to lower the expertise needed for exploits, fraud and cybercrime; AI models escaping their intended environments; and AI agents pursuing objectives that differ from…
Tenable Holdings announced that Japanese retail group H₂O Retailing has deployed the Tenable One Exposure Management Platform across its multi-cloud and hybrid infrastructure. The group operates Hankyu Hanshin Department Stores, Izumiya, Hankyu Oasis and Kansai Super. It previously relied on annual, outsourced vulnerability assessments fo…
Advantech signed a Memorandum of Understanding with DEKRA to help industrial equipment and Edge AI customers meet the EU Cyber Resilience Act (CRA) and international standards such as IEC 62443 from the product design stage. The partnership covers technical and feasibility assessments, documentation review, certification preparation, vuln…
A post on ISASecure by Rafael Barreto Jijón, managing director of OT-Knight, argues that asset owners should merge functional safety and OT cybersecurity into a single lifecycle. He notes that safety instrumented systems (SIS) protect against process hazards but are also targets for cyber-physical attacks, citing the 2017 TRITON/TRISIS in…
Tactien Group, an independent aviation advisory firm for critical infrastructure, announced CAST (Counter-UXS Assessment & System Testing), a software platform for planning, running and scoring counter-drone evaluations in customers' own environments. Utilities, refineries, data centers and military installations often buy counter-UAS det…
Booz Allen Hamilton published a whitepaper, From Digital to Physical: The AI Threat Is Here, on controlled tests of frontier AI models in its isolated OT cybersecurity lab in Chantilly, Virginia. With limited human direction, the models achieved all eight test objectives. They moved from perimeter compromise to control-zone actions in jus…
CISA, the NSA and NIST released a 14-page voluntary guidance document, Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. It covers "SI control incidents", in which one or more super intelligence (SI) agents take uninstructed actions that undermine the controls, policies or security measures t…
Industrial Cyber interviews OT security executives from Dragos, OMV Petrom, Thales and an energy-sector former CISO on how upstream oil and gas operators secure dispersed, remote and often unmanned sites. The article cites the Dragos 2026 OT/ICS review: 29% of oil and gas cases showed poor IT/OT segmentation, the highest of any sector, an…
In July 2026, 77 large healthcare data breaches (500+ individuals) were reported to the HHS Office for Civil Rights (OCR), a 10% month-over-month increase and the third consecutive monthly rise. At least 33,485,970 individuals were affected, up 642% from June and 154% above the 12-month average. January-July 2026 totals 67.4 million affec…
A Semperis survey, covered by HIPAA Journal, finds ransomware groups increasingly threatening victims' employees and their families as the share of victims paying ransoms falls from 78% in 2024 to 69% in 2025 and 59% in 2026. Of the attacks surveyed, 37% involved threats against friends or family of staff, and 41% of respondents said they…
A $6,438,578.20 settlement has been agreed to resolve the "Other Labs Track" of consolidated litigation over the American Medical Collection Agency (AMCA) breach. The defendants are AMCA clients Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc. and Austin Pathology Associates. AMCA, a subsidiary of Ret…
Mid Florida Dermatology & Plastic Surgery, a 33-location medical group in central Florida, reported to the HHS Office for Civil Rights a breach affecting 85,585 individuals. An unauthorized third party accessed its network from March 26 to March 30, 2026, and patient files may have been viewed or acquired. Two other healthcare incidents w…
The 2026 Ponemon Healthcare Cybersecurity Report, commissioned by Proofpoint, finds that cyberattacks on healthcare organizations are rising, costing more and increasingly harming patient care. The survey covered 705 IT and security practitioners. 97% of organizations suffered at least one attack in the past 12 months, averaging 51 attack…
Boston Children's Health Physicians (BCHP) and its managed IT provider XTIUM (formerly Axispoint Technology Solutions Group) settled with the New York and Connecticut Attorneys General over an August 2024 breach affecting almost 890,000 individuals. The settlement carries a $4 million penalty, of which $2.7 million is payable (New York $2…
iRhythm Technologies, maker of the Zio wearable ECG monitor, has had a June 2026 data breach confirmed at roughly 8.18 million individuals, according to the Oregon Attorney General breach list. This is close to its entire customer base of about 8 million patients in the US and Europe. The company first identified unauthorized access on Ju…
An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from Octo…
Central Ohio Primary Care Physicians, a large physician-owned primary care group based in Westerville, Ohio, with more than 80 locations, disclosed a breach affecting about 1.4 million current and former patients. In August 2026, an unauthorized third party used a voice phishing (vishing) attack to obtain credentials that gave access to i…
California has settled with 23andMe for $6 million over the 2023 credential-stuffing breach. The breach exposed personal and genetic data of about 6.9 million people, including 855,000 California residents. The settlement follows a July 2026 $18 million settlement with a coalition of 42 state attorneys general, which California did not jo…
