The Washington Post has published a report detailing a whistleblower complaint alleging that a former Department of Government Efficiency (DOGE) employee stole two complete databases from the U.S. Social Security Administration while employed as a DOGE software engineer.
The databases stolen include the “’Numident’ and the ‘Master Death File,’ which could cover records for more…
Microsoft Threat Intelligence issued a report on March 6, 2026, entitled, “AI as tradecraft: How threat actors operationalize AI,” which outlines how threat actors, including those from North Korea, are “operationalizing AI along the cyberattack lifecycle…to bypass safeguards and perform malicious activity.” The threat actors are adopting AI “as operational enablers, embedding AI…
The U.S. District Court for the Northern District of Georgia, in Veronica Bramlett, on behalf of herself and all others similarly situated v. RES 360 LLC and Peach City Properties LLC, No. 1:25-CV-3312-MLB (N.D. Ga. Mar. 4, 2026) recently granted in part and denied in part a motion to dismiss a Telephone Consumer Protection Act…
With the background of recent government warnings about increased cyber-attacks from Iranian-backed hackers, the Irish Examiner has reported that the Stryker site located in Cork, Ireland has been hit with a wiper attack by the Iranian-backed Handala Hacking Team.
The Stryker facility in Cork employs approximately 5,000 individuals and “has been crippled by a cyberattack”…
ShinyHunters continues to wreak havoc against well-known brands; most recently, Wynn Resorts. Wynn Resorts has confirmed that “an unauthorized third party acquired certain employee data.” It is believed that the threat actor was ShinyHunters. Fortunately for Wynn, the incident is not affecting its operations, and its resorts remain fully functional.
ShinyHunters announced it was the…
Data brokers are lining up to comply with California’s one-stop deletion tool requirement under the Delete Act, and the numbers signal a major shift in how privacy rights may be exercised and enforced in California starting this summer.
At its most recent meeting, the California Privacy Protection Agency (CPPA) reported that more than 575 data brokers…
The U.S. Court of Appeals for the Fifth Circuit recently issued a significant Telephone Consumer Protection Act (TCPA) decision in Bradford v. Sovereign Pest Control of TX, Inc., No. 24-20379, Doc. 85-1 (5th Cir. Feb. 25, 2026). The court affirmed summary judgment for the company and held that the TCPA’s “prior express consent” standard does…
Cybersecurity firm Darktrace recently issued its Annual Threat Report, which offered some startling statistics and findings. The Threat Report provides a “comprehensive assessment of the global cyber threat landscape and the trends shaping cyber risk in 2026.”
Findings are summarized below, but we strongly encourage read the whole report.
…
The American Hospital Association (AHA) is advising hospitals and healthcare entities to “take precautionary measures in case Iran, its proxies or self-radicalized individuals attempt attacks in the U.S.” during the conflict between Israel, the United States and Iran. The precautionary measures include strengthening cybersecurity and physical security measures.
Although the AHA is unaware of any…
Researchers at UpGuard have discovered a misconfigured cloud database online while conducting routine internet scanning that contains billions of records, including 2.7 billion Social Security numbers (SSNs) and 3 billion plaintext email addresses and password combinations. The fairly easy-to-find data was accessed without authentication.
After reporting the access to the FBI’s Internet Crime Complaint Center…
