News
Page 10 of 31 — 923 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the Full Audit Report with Fix Kit steps and compliance evidence for $99.
California's data breach list added 5 notices on July 2, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
HHS OCR listed 2 large HIPAA breach submissions dated July 1, 2026, affecting 12,394 individuals nationally. Wisconsin Department of Health Services led the batch with 8,157 individuals.
Read Update
California's AG breach list added Glucobit, Kubota, Monmouth University, and NLACRC on June 30, 2026. Independent audits score monmouth.edu at 87% and joinreframeapp.com at 48%. Deep-dive reports with email security scores for each filer.
Read Update
AssuranceAmerica MGA says a March employee-targeted attack copied policyholder files affecting 1.1M+ people across seven states. Post-incident audits score assuranceamerica.com at 34% with 0% Identity & Spoofing.
Read Update
Comcast Xfinity Home Hotspot and Cox Panoramic gateways still broadcast public Wi-Fi from rented customer equipment by default. Combined with guest-network isolation flaws like AirSnitch, that creates real SMB risk. Audits score xfinity.com at 64% and charter.com at 54%.
Read Update
California's AG breach list added AssetMark, Blank Rome LLP, MCBS, and Nissan North America on June 26, 2026. Independent domain audits score nissanusa.com at 47% and blankrome.com at 54%.
Read Update
Scammers inject fake purchase receipts into the Shop order-tracking app, impersonating Norton, Apple, and PayPal to push callback phishing. Gen Digital reported the campaign in June 2026. Audits score shopify.com at 60% and shop.app at 54%.
Read Update
Texas OAG published 10 new data security breach reports on June 26, 2026, affecting 3,624,570 Texans. Texas Parks and Wildlife led the batch with 3,087,721 affected.
Read Update
Island researchers found a Chrome extension with 11M+ installs can execute arbitrary JavaScript via server-side config — no store update required. Audits score chrome.google.com at 36% and adblock-for-youtube.com at 44%.
Read Update
LastPass says hackers stole names, addresses, and support case records via OAuth tokens compromised at vendor Klue. Password vaults were not accessed, but stolen PII enables convincing phishing. Audits score lastpass.com at 71% and klue.com at 78%.
Read Update
NSA, CISA, and cyber agencies in the UK, Canada, Australia, and New Zealand say frontier AI will transform offensive and defensive cyber capabilities on a months-long timeline. Audits score cisa.gov at 72% and nsa.gov at 60%.
Read Update
Scammers send fake invoice and debt-notice files through compromised WhatsApp accounts. VBScript attachments install ManageEngine Endpoint Central for silent remote control. Audits score whatsapp.com at 86% and meta.com at 44%.
Read Update
Adobe's May 12, 2026 PSIRT release fixes 52 vulnerabilities across Illustrator, Premiere Pro, After Effects, Adobe Connect, and Adobe Commerce. Independent audits score adobe.com at 74% but commerce.adobe.com at 35% — weeks after Adobe's April third-party BPO breach.
Read Update
Google's Chrome 148 stable update fixes 151 security issues, including critical GPU and network bugs (CVE-2026-9872, CVE-2026-9873) with $43,000 bounties. Audits score google.com at 57% and chrome.google.com at 35%.
Read Update
Dutch Police and NCSC-NL seized 200 servers controlling a residential-proxy botnet of at least 17 million devices on May 28, 2026. Media link the infrastructure to ASOCKS. ncsc.nl audits at 82%.
Read Update
The FBI IC3 alerts organizations to Kali365, a PhaaS platform that abuses device-code OAuth flows to hijack Microsoft 365 sessions without passwords. Audits score microsoft.com at 73% and office.com at 59%.
Read Update
Microsoft's 2011 Secure Boot signing certificates expire June 24–27, 2026. Systems without 2023 replacements keep booting but lose future UEFI protections. Independent audit scores microsoft.com at 73%.
Read Update
Updated Aug 2026: ShinyHunters claimed 61M Sysco Salesforce records; HIBP lists 2,691,852 accounts; S.D. Tex suits include Willets 4:26-cv-04926. Audit: sysco.com 70% (ideal 100%).
Read Update
At the State Bar of Texas annual meeting in Houston, Justice Lawrence Doss and Carrie Phaneuf of Texas Lawyers Insurance Exchange outlined four real-world scams targeting attorneys — and why antivirus cannot stop emails that look legitimate.
Read Update
Independent audits of Texas's 10 most populous counties — home to 19+ million residents — reveal scores from 78% down to 44%, with 5 of 10 below 60%. Texas Association of Counties (county.org) scores 48%.
Read Update
Researchers warn that fake World Cup ticket and free HD streaming sites harvest payment data and push malware. Flare reports nearly 40% of illegal stream users suffer direct financial losses. FIFA.com audits at 70%.
Read Update
Washington Attorney General breach notifications in 2026 that exposed medical or health-insurance information — monthly dashboard with Washingtonians-affected totals.
Read Update
Washington AG law-firm breach notifications in 2026 — plus independent audit scores for atg.wa.gov (64%) and Washington law firms ranging from 30% to 84% on audit.emailmenow.com.
Read Update
A practical guide to monitoring data breaches using state AG portals, HHS OCR, Have I Been Pwned, ransomware trackers, DeXpose, and national alert feeds — with links for security teams and Texas professionals.
Read Update
California's data breach list added 23 notices in the first three weeks of June 2026, spanning healthcare, insurance, education, law firms, and Meta Platforms.
Read Update
The FBI Internet Crime Complaint Center published new PSAs on malicious traffic distribution, parcel owner impersonation, crypto courier scams, hospice fraud, and FIFA World Cup spoofing.
Read Update
HIPAA Journal and HHS OCR data: 415 large breach submissions dated in 2026 affecting 77,717,790 individuals on the live investigation portal, plus OCR backlog context.
Read Update
The UK NCSC warns organizations using Fortinet edge devices to check for FortiBleed credential leaks, isolate compromised firewalls, and factory-reset before re-commissioning with MFA and PBKDF2.
Read Update
Ransomware.live and related feeds document active ransomware groups, leak sites, and victim counts. Here's how Texas organizations should use public trackers for early warning.
Read Update
Texas OAG published 17 new data security breach reports on June 18, 2026, affecting 3,198,835 Texans. Texas Parks and Wildlife alone accounts for 3,087,721, with healthcare, counties, and a Texas law firm also reporting.
Read Update