News
Page 8 of 31 — 923 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the Full Audit Report with Fix Kit steps and compliance evidence for $99.
Texas OAG published 9 new data security breach reports on July 23, 2026, affecting 446,735 Texans. Unlimited Technology Systems, LLC led the batch with 277,364 affected.
Read Update
CVE-2026-63030 and CVE-2026-60137 (wp2shell) enable unauthenticated WordPress RCE. Checks of NASA, TechCrunch, and Rolling Stone show patched Core; White House and NYT hide versions. Audits (100% ideal): cloudflare.com 88%, nytimes.com 76%, nasa.gov 65%.
Read Update
Group-IB documents ClickLock Stealer: a ClickFix macOS campaign that kills apps until you type your login password, then steals Keychain, browsers, crypto wallets, and leaves a GSocket backdoor. Domain audits (ideal 100%): cloudflare.com 88%, malwarebytes.com 72%, apple.com 70%.
Read Update
HHS OCR listed 1 large HIPAA breach submission dated July 21, 2026, affecting 3,803,750 individuals nationally. Unlimited Technology Systems, LLC led the batch with 3,803,750 individuals.
Read Update
Multi-source breach data week of July 19, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +15 (327 → 342). 16 companies/entities from source roundups.
Read Update
Have I Been Pwned added 1 breach on July 19, 2026, exposing 23,272,765 accounts globally. Paidwork led the batch with 23,272,765 accounts.
Read Update
LastPass warned July 13, 2026 of lookalike-domain phishing (lastpassnewsletter.com / lastpasscompliance.com) impersonating DocuSign. A parallel Bitwarden lure uses bitwardennewsletter.com. Neither vault vendor was breached. Audits: bitwarden.com 78%, docusign.com 72%, lastpass.com 66% — all below the 100% ideal, with lastpass.com at 15% transport.
Read Update
EmailMeNow’s SEC EDGAR tracker finds 14 Item 1.05 cybersecurity issuer families YTD through July 19, 2026 (18 filings / 31 cyber-related 8-Ks). Domain audits of filers: Stryker 76% leads; none reach the 100% ideal; most score 15% transport.
Read Update
Independent EmailMeNow audits of seven major password-manager domains find scores from 86% (Dashlane) to 65% (Keeper) — none reach the 100% ideal. Proton.me leads transport at 100%; LastPass sits at 66% with 15% transport amid 2026 phishing waves.
Read Update
Coca-Cola disclosed a July 16, 2026 Fairlife ransomware event that suspended U.S. dairy production while Canada continued. Product safety unaffected; scope still unknown. Audits: fairlife.com 78%, coca-cola.com 69%, coca-colacompany.com 63% — all below the 100% ideal, with 15% transport on each.
Read Update
California's data breach list added 4 notices on July 17, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed July 17, 2026. River Financial Corp (RVRF) is among the filers.
Read Update
Researcher tokay0 disclosed an unpatched SharkNinja AWS IoT Core certificate-scoping flaw (Jul 13, 2026) enabling cross-device RCE, cameras, maps, and plaintext Wi-Fi keys. ~1.52M devices seen in one region; ~44% respond to command probes. Audits: irobot.com 68%, ecovacs.com 62%, roborock.com 61%, sharkninja.com 54%, sharkclean.com 46% — none at the 100% ideal.
Read Update
Texas OAG published 9 new data security breach reports on July 17, 2026, affecting 3,992,680 Texans. DentaQuest, LLC led the batch with 3,973,000 affected.
Read Update
Zoom ZSB-26014 / CVE-2026-53412 (CVSS 9.8) can let an unauthenticated attacker take over Zoom accounts on Windows via the network. Update Workplace to 7.0.0+ and patched VDI builds. Audits: bleepingcomputer.com 63%, zoom.us/zoom.com 58% — none at the 100% ideal.
Read Update
Forbes Tech Council and Resiliently warn that MFA/EDR warranties and outside-in scans now drive cyber coverage — while ~1 in 4 claims face denial patterns. Audits: forbes.com 66%, travelers.com 58%, resiliently.ai 32% — none at the 100% ideal.
Read Update
Have I Been Pwned indexed ~6.6M Goose Creek Candle emails after June 2026 customer outreach alleged a Shopify-related leak. Names, phones, addresses, order IDs, and spend exposed — phishing risk remains. Audits: goosecreekcandle.com 53%, goosecreek.com 51% — none at the 100% ideal.
Read Update
Texas AG Ken Paxton joined a 42-state $150M bankruptcy settlement with 23andMe over the 2023 breach that exposed genetic data of 6.9M people. Immediate recovery $18M; Texas $1.27M. Audits: 23andme.com 52%, michigan.gov 42%, texasattorneygeneral.gov 37% — none at the 100% ideal.
Read Update
Malwarebytes warned that Meta’s Muse Image (July 7, 2026) let strangers generate AI images from public Instagram handles with no notice. Meta reversed the feature July 11. Audits score meta.com 39%, facebook.com 63%, Instagram 81% — none at the 100% ideal.
Read Update
Under Armour is investigating reports that emails tied to ~72.7M accounts were posted online after an alleged Everest ransomware incident. No passwords or payments reported exposed — phishing risk remains. Audits: underarmour.com 52%, ua.com 54% — none at the 100% ideal.
Read Update
HHS OCR listed 2 large HIPAA breach submissions dated July 13, 2026, affecting 151,310 individuals nationally. Madera Community Hospital led the batch with 150,810 individuals.
Read Update
Nelson University (Waxahachie; formerly SAGU) reported 21,905 Texans on the Texas OAG list June 18, 2026 after a March–April 2025 intrusion claimed by Qilin. Audits score nelson.edu at 44% — well below the 100% ideal.
Read Update
Southern Methodist University appears on the Texas OAG breach list dated October 17, 2025 covering 266 Texans with SSNs and dates of birth exposed. Audits score smu.edu at 44% — well below the 100% ideal.
Read Update
Side-by-side audits of UT System, Texas A&M System, and leading private Texas universities. St. Thomas leads privates at 69%; Rice and SMU sit at 44%. None reach the 100% ideal domain security score.
Read Update
TTUHSC’s Texas OAG filing lists 738,506 Texans after a September 2024 cybersecurity event tied to Interlock ransomware claims. Audits score ttuhsc.edu at 44% and ttu.edu at 34% — far below the 100% ideal.
Read Update
Independent audits of 10 major Texas universities show overall scores from 76% down to 34% — none reach the 100% ideal. Transport security averages just 21%, leaving campuses exposed to spoofed financial-aid and payroll phishing.
Read Update
Audits of 7 major Texas community college systems show overall scores from 82% down to 44%. San Jacinto leads; Austin Community College ties the bottom at 44% — none reach the 100% ideal for domain security.
Read Update
University of Dallas reported 7,313 Texans on the Texas OAG list May 29, 2026 after August 2025 unauthorized access. Audits score udallas.edu at 56% overall with only 20% Identity — far below the 100% ideal.
Read Update
University of St. Thomas–Houston reported a Texas OAG breach on May 28, 2026 affecting 24,158 Texans after July–August 2025 unauthorized access. Audits score stthom.edu at 69% — above peers, still below the 100% ideal.
Read Update
Apple's iOS 26.3 emergency update (Feb 11, 2026) patched about 39 security issues, including actively exploited dyld zero-day CVE-2026-20700. Audits score apple.com 70%, icloud.com 68%, and support.apple.com 52% vs a 100% domain-security ideal.
Read Update