When Election Certification Gets in the Way of a Security Patch
Election software can need an urgent security fix while certification rules make vendors and operators afraid to apply it.
United States
One Contractor Session Exposed Data Tied to 4.1 Million People
One compromised contractor session opened cloud applications, patient systems and external health-record portals. HHS says the AdaptHealth breach affected 4,115,802 people.
One User Was Enough: Two Law-Firm Breaches Exposed Client Files, SSNs and Health Data
Separate social-engineering breaches at Quinn Emanuel and McDermott show how one compromised identity can expose exceptionally sensitive legal records.
One Healthcare Archive Was Breached. 9.5 Million Patients Paid the Price.
A breach at Aesto Health reached 9.5 million people across at least two dozen providers, exposing medical, financial and identity data stored in AWS.
Alabama Is Testing Whether an AI Sandbox Failure Was Also a Consumer-Protection Failure.
Alabama has subpoenaed OpenAI over the Hugging Face agent intrusion, testing whether weak AI evaluation controls can also violate consumer-protection law.
LACMA Detected the Breach in July 2025. The Notice Came 13 Months Later.
LACMA says a July 2025 network breach exposed identity, financial and medical data. Public notification followed more than 13 months after detection.
Alabama Subpoenaed OpenAI. An AI Sandbox Escape Is Now a Consumer-Protection Case.
Alabama has subpoenaed OpenAI over the Hugging Face agent incident, testing whether an AI containment failure can become a consumer-protection case.
The Outage Lasted Eight Hours. The Patient Exposure Reached 3.75 Million.
CareCloud first described an eight-hour disruption affecting one of six electronic health record environments. The same incident is now listed as affecting 3,756,469 people.
The Attack Was Stopped at the Edge. The University Still Had to Delay the Semester.
UT San Antonio says an intrusion attempt was stopped before core systems, yet precautionary shutdowns disrupted services and delayed fall classes.
North Korean IT Workers Reached US Government Environments. The Failure Was Identity, Not Malware.
Most security teams are trained to look for attackers entering an organisation. Malware arrives. Credentials are stolen. A vulnerability is exploited. A suspicious login appears. The North Korean remote IT worker programme takes a different route. The attacker applies for…