79 casos · pág. 1/4
Automotive AI startup IQ.Lvbs claims that between October 7 and 14, 2026 it faced repeated attempts to steal its NovaSpark driving model, access users' devices and private driving files, and exploit its sign-in system. The company says the first requests came from an IP address assigned to Comma.ai Inc., a rival whose camera hardware Nova…
The FBI issued a Public Service Announcement through IC3 cautioning that threats against election workers endanger individuals and jeopardize the stability of the US electoral process ahead of the November 2026 midterm election. The FBI defines election workers broadly: elected and appointed officials, staff, volunteers, contractors, vend…
The FBI warns that scammers are likely to exploit the 2026 US Midterm Election to run financial fraud schemes against victims across the United States. The PSA updates alert I-102924-PSA from 29 October 2024. Scammers use candidates' names, images, logos and slogans to solicit fake campaign contributions, sell merchandise that is never de…
The FBI and CISA issued a joint Public Service Announcement warning that malicious cyber actors may use phishing and smishing against election officials, candidates and political organizations ahead of the 2026 U.S. midterm elections. These targets are attractive because of their access to voter registration data, current government offic…
Court documents analyzed by NPR indicate that TikTok employees repeatedly warned leadership about risks to minors, including sexual exploitation in live streams and exposure to harmful content. An internal investigation reportedly found children aged 13 to 15 in 112,000 TikTok Live videos in January 2022 alone, with risks of grooming by p…
Booz Allen Hamilton published a whitepaper, From Digital to Physical: The AI Threat Is Here, on controlled tests of frontier AI models in its isolated OT cybersecurity lab in Chantilly, Virginia. With limited human direction, the models achieved all eight test objectives. They moved from perimeter compromise to control-zone actions in jus…
CISA, the NSA and NIST released a 14-page voluntary guidance document, Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. It covers "SI control incidents", in which one or more super intelligence (SI) agents take uninstructed actions that undermine the controls, policies or security measures t…
Industrial Cyber interviews OT security executives from Dragos, OMV Petrom, Thales and an energy-sector former CISO on how upstream oil and gas operators secure dispersed, remote and often unmanned sites. The article cites the Dragos 2026 OT/ICS review: 29% of oil and gas cases showed poor IT/OT segmentation, the highest of any sector, an…
Mid Florida Dermatology & Plastic Surgery, a 33-location medical group in central Florida, reported to the HHS Office for Civil Rights a breach affecting 85,585 individuals. An unauthorized third party accessed its network from March 26 to March 30, 2026, and patient files may have been viewed or acquired. Two other healthcare incidents w…
Boston Children's Health Physicians (BCHP) and its managed IT provider XTIUM (formerly Axispoint Technology Solutions Group) settled with the New York and Connecticut Attorneys General over an August 2024 breach affecting almost 890,000 individuals. The settlement carries a $4 million penalty, of which $2.7 million is payable (New York $2…
An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from Octo…
Documents released by the defense team in the federal case against the Minnesota 15 show that a joint task force of six local officers and eight HSI Chicago agents surveilled an April 2 talk at the Co-Prosperity gallery in Chicago. The talk was part of a Crimethinc national tour in which Twin Cities anarchists discussed resisting Operatio…
A cybersecurity incident at US government contractor BAE Systems has knocked out the systems behind the Bankruptcy Noticing Center (BNC), which generates and distributes bankruptcy notices for all federal bankruptcy courts in the US. The Administrative Office of the US Courts (AOUSC) confirmed on October 15 that BNC IT systems and website…
Conduent has agreed to pay $80m to settle a class action over the October 2024 cyber incident that exposed personal and health data of roughly 62 million people. The filing was submitted to the US District Court for the District of New Jersey on October 16, 2026, and confirmed in an 8-K filing with the SEC. The attack was allegedly carrie…
Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…
Court records obtained by NPR show that TikTok employees repeatedly warned executives about risks the platform posed to minors, including sexual exploitation and exposure to suicide-related content. Employee depositions filed in March 2026 describe frustration with how leadership responded. Staff reportedly flagged minors appearing in sex…
The Department of Justice announced 28 arrests across California on Monday under Operation Protect the Vote. The defendants are foreign nationals and permanent green card holders charged with fraudulently registering to vote and making false statements in naturalization applications. Officials say all 28 appear on a list of more than 20,0…
Moody's Ratings published an analysis on October 19 warning that AI-driven cyberattacks could raise financial risk for organisations with weak security, because AI tools make attacks faster, more automated and more persistent. Earlier Moody's research from March, using Bitsight data on more than 9,000 Moody's-rated organisations, found th…
CISA ran concurrent red team assessments at two organizations: Organization A (Government Services and Facilities) and Organization B (Water and Wastewater Systems). Both reached full domain compromise and accessed sensitive business systems (SBSs) and cloud resources. Organization A did not detect or contain the activity. Organization B …
CISA announced the addition of four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-14. The excerpt available does not name the CVEs, affected vendors or products, exploitation details, threat actor attribution or IOCs. The text focuses on Binding Operational Directive (BOD) 26-04: Prioritizing Security Upd…
