205 casos · pág. 1/11
The HHS Office for Civil Rights (OCR) can impose civil penalties of $14,602 to $2,190,294 per violation for knowingly violating HIPAA. These fall under Tier 3 and Tier 4 "willful neglect" violations, depending on whether the violation is corrected within 30 days. Penalty amounts are also influenced by prior compliance history, cooperation…
State attorneys general share HIPAA enforcement with the HHS Office for Civil Rights (OCR) under authority granted by the HITECH Act. The first action came in 2010, when the Connecticut AG settled with Health Net for $250,000. Enforcement peaked in 2023 with 16 actions, including a $49.5 million penalty against Blackbaud over a 5.5 millio…
Anthropic has launched Claude Duet, an agent app for professionals and small businesses that automates and manages tasks. It competes with Meta Muse, OpenAI Dots, Hark, Instinct, Grok Bot and Fo. Duet runs on the Claude Opus 5.5 model and works in the background in its own virtual machine, returning to the user when it needs approval. It …
Nirva, a startup founded in 2025 by ex-Meta Reality Labs employees Wei Lyu and Jason Chen with Hanying Hu, announced a $25 million pre-Series A round, bringing total funding to $33 million (earlier backers include Lightspeed and South Park Commons). Its first product is a roughly 8 g pendant, also wearable as a bracelet, priced at $249, w…
DeepSeek, the Hangzhou-based Chinese AI lab, has reportedly raised about $15 billion (roughly 100 billion yuan), according to Bloomberg as relayed by TechCrunch. The round came two days after the U.S. ordered federal civilian agencies to remove DeepSeek's AI technology from their systems over security concerns. Potential investors reporte…
Amsterdam-based industrial cybersecurity firm Indurex has raised €7 million (about $7.84 million) in a round led by Contrarian Ventures, with Axeleo Capital and Curiosity participating. The funding will go to research and development and to commercial expansion in Europe and the Middle East, followed by the United States and Asia-Pacific.…
HHS confirmed in the Federal Register that it will not apply an annual inflation multiplier to HIPAA civil monetary penalties in 2026, so the 2025 penalty levels stay in force. The cause is the lengthy fall 2025 government shutdown, which stopped the Bureau of Labor Statistics (BLS) from producing the October 2025 CPI-U data needed to cal…
Keeper Security has launched an opt-in Phishing Protection feature in the Keeper Browser Extension (version 18.2.0). It uses a local AI engine to detect look-alike domains, spoofed websites and brand impersonation before users enter credentials. The vendor cites the 2026 Verizon Data Breach Investigations Report, which found credential ab…
Corsha, an industrial identity security vendor, announced Folio, a new module on the Corsha Industrial Identity Security Platform. It automatically builds and updates operational maps and documentation of how industrial systems are connected and communicating. Folio draws on live network and access data captured by Corsha Gatekeepers, so …
Black Kite announced Quantum Readiness, a new set of controls in the SSL/TLS Strength category of the Black Kite Cyber Rating. The controls assess quantum agility across an organization's third-party vendor ecosystem. They show which vendors are quantum-ready or adopting quantum-safe encryption. The release is product news, not an inciden…
The tenth annual Security Serious Unsung Heroes Awards, organised by Eskenzi PR, took place at St Barts Pub in London. The event recognised cybersecurity professionals, educators and community advocates whose work often goes unnoticed. Winners included Phil Muncaster (Cyber Correspondent), Andrea Litherland of Domestic & General (CISO Sup…
A pen tester, Dahvid Schloss (COO of Suzu Labs), audited the network devices of a large, unnamed US pharmacy retailer and found that an internet-facing Cisco edge firewall used the enable (administrator) password "password". The password was stored as Cisco IOS type 7, a reversible encoding with a publicly known key, so he could recover i…
The 2026 SANS Cloud Security Survey Insights report (400 IT and security professionals) finds a persistent cloud security maturity gap. 93% of organizations run production workloads in the cloud and 65% use more than one provider. Only 40% rate their cloud security strategy as advanced or optimized, even though 73% have a dedicated cloud …
A New Mexico state judge ordered Meta to pay $25 billion, the largest fine ever imposed on the company, after a jury found it liable for deceiving users about how Facebook handled their personal data. Judge Francis J. Mathew ruled the deception was intentional and that executives consistently misled users. In September, jurors found over …
Interpol announced the results of Operation Serengeti III, run between June 29 and August 31 with authorities from 21 African countries. The operation targeted business email compromise (BEC), ransomware and online scams. It led to 1,462 arrests, the dismantling of 10,909 malicious networks and the recovery of more than $105 million. Inve…
The United Arab Emirates says it is moving 50% of its government services to agentic AI as part of a transformation of its public service footprint. According to the Dark Reading report, the government says it is building a foundation of security and safety alongside the transition. The available text is only a short teaser, so it gives n…
A ZDNET consumer how-to article describes how to make Waze the default mapping app on a Google Pixel phone. The author says the August Android update removed the option to choose a default mapping app from the Default apps settings. The article describes no security incident, vulnerability or threat activity, and has no direct defender re…
ZDNET's Jack Wallen reviews GridCraft, a free, open-source, Rust-based spreadsheet application from ArtCraft that mimics Microsoft Excel. It runs natively on Linux, FreeBSD, macOS and Windows and supports XLSX files, more than 500 functions, charts and pivot tables. The reviewer notes weak template support, with no .xltx saving, and advis…
Brazilian outlet Olhar Digital describes a quishing fraud pattern in which criminals create or tamper with payment QR Codes so that victims' money goes to accounts the fraudsters control. The scheme appears in online shopping, in physical venues such as bars, restaurants, street markets and car parks, and in printed boletos. The Federação…
Tesla said on its Q3 earnings call that it will begin selling the Cybercab, an autonomous two-seater with no steering wheel or traditional controls, to customers by the end of 2026. Current production is destined for Tesla's own robotaxi fleet, and external sales will start small. Elon Musk said unsupervised FSD for existing owners is now…
