https://cybersecuritytracker.ai/?persona=grcCurated cybersecurity news and vulnerability intelligence.Sun, 26 Jul 2026 22:32:50 GMThttps://databreaches.net/2026/07/26/developing-anmed-reports-phone-and-internet-outage-impacting-all-hospital-locations-ers-remain-open?pk_campaign=feed&pk_kwd=developing-anmed-reports-phone-and-internet-outage-impacting-all-hospital-locations-ers-remain-opencst-3229AnMed Health System, which operates four hospitals in Upstate South Carolina and northeast Georgia, experienced a phone and internet outage affecting all locations. Emergency rooms remained operational during the incident despite the connectivity disruption.Sun, 26 Jul 2026 14:10:29 GMThttps://databreaches.net/2026/07/26/a-list-directors-actors-and-celebrities-exposed-in-tribeca-film-festival-data-leak?pk_campaign=feed&pk_kwd=a-list-directors-actors-and-celebrities-exposed-in-tribeca-film-festival-data-leakcst-3230A security researcher discovered four publicly accessible, unencrypted databases connected to the Tribeca Film Festival, including a development database containing over 203,000 records. The databases lacked password protection and exposed sensitive information about festival-associated individuals.Sun, 26 Jul 2026 13:06:14 GMThttps://helpnetsecurity.com/2026/07/26/week-in-review-servicenow-pre-auth-rce-exploited-in-the-wild-hugging-face-breachedcst-3226A weekly news roundup covered multiple security topics, including active exploitation of a ServiceNow pre-authentication remote code execution vulnerability and a breach of Hugging Face. The piece also discussed how organizations increasingly run multiple AI platforms simultaneously across different vendors and departments.Sun, 26 Jul 2026 08:00:34 GMThttps://databreaches.net/2026/07/25/us-house-votes-to-extend-cyber-sharing-law-for-10-years?pk_campaign=feed&pk_kwd=us-house-votes-to-extend-cyber-sharing-law-for-10-yearscst-3218The U.S. House of Representatives voted to extend a key cyberthreat sharing law for 10 years by including the reauthorization in the fiscal year 2027 national defense authorization act. The measure passed narrowly on a 216-212 vote Wednesday and was attached to the $1.15 trillion defense policy bill after the reauthorization had been stalled.Sat, 25 Jul 2026 14:25:16 GMThttps://databreaches.net/2026/07/25/au-sydney-nurse-accused-of-downloading-patients-data-in-alleged-breach-of-trust?pk_campaign=feed&pk_kwd=au-sydney-nurse-accused-of-downloading-patients-data-in-alleged-breach-of-trustcst-3219A registered nurse in northern Sydney has been charged after allegedly downloading patient data without authorization. NSW Police launched an investigation following a report to the agency and subsequently searched a home in Frenchs Forest as part of the inquiry.Sat, 25 Jul 2026 14:24:50 GMThttps://databreaches.net/2026/07/25/no-need-to-hack-when-its-leaking-click-to-pray-edition?pk_campaign=feed&pk_kwd=no-need-to-hack-when-its-leaking-click-to-pray-editioncst-3220The Click To Pray app, a prayer application endorsed by the Pope with hundreds of thousands of users, exposed users' names and email addresses through a data leak. An ethical hacker discovered the exposure, which had persisted for months or longer.Sat, 25 Jul 2026 14:24:35 GMThttps://bleepingcomputer.com/news/artificial-intelligence/openai-confirms-chatgpt-is-down-worldwidecst-3208OpenAI confirmed that ChatGPT experienced a worldwide outage affecting access to the artificial intelligence chatbot. The company did not provide details on the cause or expected resolution timeline in the initial report.Sat, 25 Jul 2026 09:31:09 GMThttps://darkreading.com/cybersecurity-operations/cisos-vs-boards-myth-or-misunderstanding-cst-3196Boards are increasing focus on security due to rising threats, yet communication gaps remain between board members and chief information security officers (CISOs). Both groups report needing additional resources and better dialogue to close the divide.Fri, 24 Jul 2026 21:31:53 GMThttps://cyberscoop.com/cisa-circia-cyber-incident-reporting-rule-feedbackcst-3198Industry groups told CISA during town halls on the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) that they want the rule to cover fewer companies, require fewer incident reports, and demand less detailed information when reporting does occur. The rule, which Congress designed to require critical infrastructure owners to report major cyberattacks within 72 hours and ransomware payments within 24 hours, has missed multiple finalization deadlines, with CISA now targeting September for completion. Industry representatives expressed concerns about the scope affecting over 300,000 entities, the burden of reporting minor intrusion attempts, and the sensitivity of sharing security measure details.Fri, 24 Jul 2026 20:58:35 GMThttps://bleepingcomputer.com/news/security/ontrac-notifies-customers-of-data-breach-after-network-hackcst-3195OnTrac, a parcel delivery company, disclosed that attackers breached its corporate network and potentially accessed customer personal information. The company is notifying affected customers of the incident.Fri, 24 Jul 2026 19:55:01 GMThttps://techcrunch.com/2026/07/24/us-accuses-american-of-allegedly-wiping-his-phone-using-a-duress-password-during-border-searchcst-3194A U.S. citizen is challenging a government claim in court that he provided border authorities with a passcode that erased his phone's data. The case raises constitutional questions about privacy protections and what individuals must disclose during border searches.Fri, 24 Jul 2026 17:53:30 GMThttps://therecord.media/andy-burnham-liz-lloyd-cyber-policy-ukcst-3193The new UK Prime Minister Keir Starmer retained Liz Lloyd in a cyber policy role, maintaining her position despite broader government restructuring. Lloyd remains one of the few Starmer allies continuing in the administration.Fri, 24 Jul 2026 17:14:00 GMThttps://cyberscoop.com/tech-leaders-open-source-ai-cybersecuritycst-3185Microsoft and more than two dozen technology companies released an open letter urging policymakers to support open-source AI systems, comparing the potential ecosystem benefits to the open-source software movement of the 1980s. The signatories argue that open-weight models enable startups, universities, and research institutions to innovate efficiently and strengthen cybersecurity defenses, though critics warn that unrestricted access could lower barriers to entry for malicious actors and enable creation of deepfakes and child sexual abuse material.Fri, 24 Jul 2026 15:22:15 GMThttps://bleepingcomputer.com/news/security/chick-fil-a-data-breach-affects-more-than-13-000-customerscst-3178Chick-fil-A confirmed that attackers using credential stuffing tactics compromised more than 13,000 customer accounts on its website and mobile app during a three-day period in mid-June. The breach involved unauthorized access to customer data through reused or weak credentials rather than a direct compromise of the company's systems.Fri, 24 Jul 2026 14:04:29 GMThttps://databreaches.net/2026/07/24/suspect-arrested-in-investigation-into-sadistic-764-group?pk_campaign=feed&pk_kwd=suspect-arrested-in-investigation-into-sadistic-764-groupcst-3187A suspect from North Holland was arrested on July 20 in connection with an online sadistic network called '764'. The individual allegedly coerced minors to engage in self-harm and create 'bloodsigns' bearing his username as evidence of compliance.Fri, 24 Jul 2026 13:47:04 GMThttps://darkreading.com/vulnerabilities-threats/vatican-official-prayer-app-leaks-700k-piicst-3167Vatican's official prayer application contained a vulnerable API endpoint that exposed personal information for over 700,000 users worldwide. The exposed data included names, email addresses, location information, and site status that could be accessed without authentication through a standard web browser.Fri, 24 Jul 2026 13:00:00 GMThttps://databreaches.net/2026/07/24/crime-stoppers-assured-people-their-tips-would-be-anonymous-then-more-than-1-million-tips-leaked?pk_campaign=feed&pk_kwd=crime-stoppers-assured-people-their-tips-would-be-anonymous-then-more-than-1-million-tips-leakedcst-3188A breach of Navigate360's systems exposed more than one million tips submitted to Crime Stoppers and law enforcement programs that relied on the company's software for anonymous reporting. The incident undermines trust in anonymous tip submission channels that promised confidentiality to sources.Fri, 24 Jul 2026 12:49:59 GMThttps://silentpush.com/blog/the-soci-act-obligationscst-3176Australia's Security of Critical Infrastructure Act 2018 (SOCI Act) imposes cyber risk management, incident reporting, and asset registration requirements on organizations operating in eleven critical sectors including energy, finance, healthcare, and transport. The framework has evolved significantly over the past two years, with additional changes currently under consultation, and increasingly emphasizes proactive threat visibility and defense rather than reactive incident response.Fri, 24 Jul 2026 12:49:17 GMThttps://databreaches.net/2026/07/24/origin-silent-on-settlement-as-alleged-fired-employee-breach-detail-emerges?pk_campaign=feed&pk_kwd=origin-silent-on-settlement-as-alleged-fired-employee-breach-detail-emergescst-3170Origin Energy has declined to publicly comment on a reported private settlement of a cyber extortion threat. The alleged breach involved unauthorized access through a former employee's credentials, creating concurrent disclosure obligations to regulators, the ASX, and insurers.Fri, 24 Jul 2026 12:08:15 GMThttps://databreaches.net/2026/07/24/t-mobile-violated-wa-data-breach-notification-law-judge-rules?pk_campaign=feed&pk_kwd=t-mobile-violated-wa-data-breach-notification-law-judge-rulescst-3171A King County Superior Court judge ruled that T-Mobile violated Washington state data breach notification law by failing to properly notify customers of a 2024 breach affecting 40 million people whose sensitive personal information was stolen and sold on the dark web. The Washington attorney general's office filed the civil lawsuit against T-Mobile in January 2025. The ruling establishes that T-Mobile's notification practices did not meet the state's legal requirements.Fri, 24 Jul 2026 12:08:06 GMThttps://databreaches.net/2026/07/24/furious-kpmg-boss-expels-senior-partner-over-confidential-documents-in-locker?pk_campaign=feed&pk_kwd=furious-kpmg-boss-expels-senior-partner-over-confidential-documents-in-lockercst-3172KPMG's chief operating officer, Eileen Hoggett, was expelled after an investigation confirmed she and other senior partners illegally accessed sensitive Lendlease board documents and stored them in a work locker. The expulsion followed a whistleblower claim regarding the unauthorized possession of confidential materials.Fri, 24 Jul 2026 12:07:56 GMThttps://databreaches.net/2026/07/24/millions-of-california-bought-cars-can-be-hijacked-via-bluetooth?pk_campaign=feed&pk_kwd=millions-of-california-bought-cars-can-be-hijacked-via-bluetoothcst-3174Researchers at UC San Diego identified Bluetooth vulnerabilities affecting at least 2.2 million vehicles equipped with dealer-installed KARR and SWDS security systems. The flaws allow nearby attackers to unlock doors or disable vehicle ignition through wireless attacks. The full research details are forthcoming.Fri, 24 Jul 2026 12:06:56 GMThttps://bleepingcomputer.com/news/security/man-gets-six-years-for-hacking-750-womens-snapchat-accountscst-3159An Illinois man received a 76-month prison sentence and three years of supervised release for hacking over 750 women's Snapchat accounts to obtain their nude photos. The case illustrates criminal liability for unauthorized account access and theft of intimate images.Fri, 24 Jul 2026 11:17:19 GMThttps://helpnetsecurity.com/2026/07/24/new-infosec-products-of-the-week-july-24-2026cst-3141A weekly roundup covers new security products from vendors including Druva, which launched AI Resilience to add backup, recovery, and governance capabilities for AI workloads with support for Microsoft Copilot and Claude Code.Fri, 24 Jul 2026 04:00:36 GMThttps://therecord.media/visa-restrictions-cyber-scammerscst-3112The U.S. State Department, under Secretary of State Marco Rubio, announced visa restrictions targeting individuals involved in transnational cyber-scam operations. The policy aims to limit entry to the United States for those connected to international fraud schemes conducted through digital channels.Thu, 23 Jul 2026 16:29:00 GMThttps://bleepingcomputer.com/news/microsoft/microsoft-365-outage-affects-teams-sharepoint-and-other-servicescst-3100Microsoft experienced a widespread outage affecting Teams, SharePoint, and other Microsoft 365 services, with impact concentrated in North America. The disruption impacted collaboration and productivity tools relied upon by thousands of organizations.Thu, 23 Jul 2026 15:34:43 GMThttps://securityweek.com/chick-fil-a-accounts-get-fried-in-credential-stuffing-attackcst-3109Threat actors used credentials from previous breaches to gain unauthorized access to Chick-fil-A One customer accounts through credential stuffing. The attack relied on reused passwords rather than exploiting a vulnerability in the restaurant chain's systems.Thu, 23 Jul 2026 14:55:19 GMThttps://bleepingcomputer.com/news/security/fedramp-rev5-is-ending-what-the-20x-transition-really-requirescst-3101FedRAMP 20X replaces the current Rev5 model by shifting from periodic security assessments to continuous, machine-readable evidence that validates control effectiveness. Organizations must transition to this evidence-based assurance approach to maintain compliance with the updated federal security framework.Thu, 23 Jul 2026 14:00:10 GMThttps://securityweek.com/abstract-raises-25-million-to-expand-composable-security-operations-platformcst-3110Abstract, a security operations platform company, has raised $25 million in its latest funding round, bringing total capital raised to approximately $50 million. The company plans to use the investment to expand its composable security operations platform.Thu, 23 Jul 2026 13:54:56 GMThttps://therecord.media/australia-origin-energy-data-breachcst-3113Origin Energy, a major Australian energy supplier, confirmed that customer data was compromised in a recent breach and is investigating the scope of the incident to determine how many Australians were affected.Thu, 23 Jul 2026 13:20:00 GMThttps://bleepingcomputer.com/news/google/eu-fines-google-1-billion-for-digital-markets-act-breaches-in-search-and-play-storecst-3083The European Commission issued a €890 million fine to Google for violating the Digital Markets Act, which regulates fair competition in digital markets. The penalty addresses breaches related to the company's search and app store practices.Thu, 23 Jul 2026 12:33:19 GMThttps://schneier.com/blog/archives/2026/07/end-to-end-encryption-and-going-dark.htmlcst-3097A new academic paper analyzes the third round of the 'Going Dark' debate, tracing encryption policy from the 1990s Crypto Wars through current end-to-end encryption (E2EE) controversies. The authors identify five distinct E2EE technical scenarios and demonstrate that E2EE is embedded throughout modern infrastructure including Transport Layer Security, Secure Shell, Virtual Private Networks, and Zero Trust Architecture, arguing that broad restrictions would harm cybersecurity and government operations.Thu, 23 Jul 2026 11:03:50 GMThttps://cyberscoop.com/cisa-anchor-ci-critical-infrastructure-framework-op-edcst-3076The Cybersecurity and Infrastructure Security Agency (CISA) published a notice on July 1 establishing ANCHOR-CI, a new framework for government-industry collaboration on critical infrastructure protection that replaces the 20-year-old Critical Infrastructure Partnership Advisory Council (CIPAC). The new structure introduces cross-sector councils alongside traditional sector-specific councils to address threats that span multiple industries, moving beyond the siloed approach that characterized the previous model. CISA director approval of council members and streamlined advisory mechanisms aim to improve the speed and effectiveness of government-private sector coordination on emerging cyber and resilience issues.Thu, 23 Jul 2026 10:00:00 GMThttps://securityweek.com/assaf-keren-appointed-new-ciso-of-metacst-3073Assaf Keren has been appointed Chief Information Security Officer (CISO) at Meta, succeeding Guy Rosen who retired after 13 years with the company.Thu, 23 Jul 2026 09:53:51 GMThttps://bleepingcomputer.com/news/microsoft/microsoft-working-to-fix-exchange-online-mailbox-quarantine-issuecst-3069Microsoft is addressing an issue with Exchange Online that has been incorrectly quarantining customer mailboxes since Sunday. The company is working to resolve the problem and restore normal service for affected users.Thu, 23 Jul 2026 09:20:10 GMThttps://risky.biz/srsly-risky-biz-knives-are-out-for-open-weight-ai-modelscst-3080The Trump administration and Chinese government are both signaling plans to restrict open-weight artificial intelligence (AI) models, with the US considering adding Chinese AI companies to its Entity List and China exploring export controls on its own AI technology. White House officials including Michael Kratsios publicly accused Chinese company Moonshot AI of conducting large-scale model distillation against US AI systems to steal proprietary technology.Thu, 23 Jul 2026 07:41:22 GMThttps://databreaches.net/2026/07/22/id-kootenai-county-notifies-residents-of-data-breach?pk_campaign=feed&pk_kwd=id-kootenai-county-notifies-residents-of-data-breachcst-3057Kootenai County is notifying residents of a ransomware attack discovered on March 30, 2026, that compromised personal information on its computer network. The county took immediate action to secure and restore its systems following the detection.Thu, 23 Jul 2026 00:45:56 GMThttps://databreaches.net/2026/07/22/tn-data-breach-delays-start-of-sumner-county-school-year?pk_campaign=feed&pk_kwd=tn-data-breach-delays-start-of-sumner-county-school-yearcst-3058Sumner County Schools in Tennessee discovered a data breach in its computer network and postponed the start of the school year to resolve the incident before students return. The breach was identified earlier in the week, prompting district officials to revise the calendar.Thu, 23 Jul 2026 00:25:52 GMThttps://databreaches.net/2026/07/22/instructure-incident-driving-58-percent-of-breach-notices-in-2026?pk_campaign=feed&pk_kwd=instructure-incident-driving-58-percent-of-breach-notices-in-2026cst-3059A single Instructure incident generated 471 million breach notices in the first half of 2026, accounting for 58 percent of all breach notifications despite 1,029 total compromises being reported during that period. The Identity Theft Resource Center documented this concentration of impact from one major breach event among organizations handling large datasets.Wed, 22 Jul 2026 23:12:10 GMThttps://bleepingcomputer.com/news/security/upbound-says-hack-caused-13-million-in-fraudulent-acima-leasescst-3047Threat actors who compromised Upbound Group's systems used stolen data to fraudulently originate approximately $13 million in Acima leases. The breach highlighted the exposure of customer information and the downstream financial impact when stolen credentials are weaponized for unauthorized transactions.Wed, 22 Jul 2026 21:43:39 GMThttps://cyberscoop.com/gao-report-duplicate-cybersecurity-regulations-harmonizationcst-3053A Government Accountability Office report found that 80 of 117 federal cybersecurity regulations contain duplicate reporting requirements, with seven out of 10 rules requiring written reports to agencies overlapping elsewhere. Harmonization efforts under the Biden administration have stalled under Trump, with a March 2024 executive order pausing work while the administration conducts a review. The fragmentation affects critical infrastructure sectors, which may face multiple conflicting reporting obligations depending on regulatory jurisdiction.Wed, 22 Jul 2026 21:04:43 GMThttps://therecord.media/cisa-2015-extension-passes-house-ndaacst-3052The House included a 10-year extension of the Cybersecurity Information Sharing Act (CISA) of 2015 in its fiscal 2027 defense authorization bill. The renewal maintains legal protections for organizations that voluntarily share cybersecurity threat information with government agencies and each other.Wed, 22 Jul 2026 20:39:35 GMThttps://bleepingcomputer.com/news/security/south-korea-discloses-data-breach-impacting-diplomats-worldwidecst-3048South Korea's National Diplomatic Academy suffered a ten-month breach of its online education system, exposing personal information of current and former Ministry of Foreign Affairs employees and diplomats stationed abroad. The incident remained undetected for an extended period before disclosure.Wed, 22 Jul 2026 20:06:54 GMThttps://therecord.media/france-social-media-ban-parliamentcst-3036France's Parliament has passed legislation to ban social media access for children under 15 years old, establishing France as the first European nation to implement such a restriction on platform use by minors. The vote reflects growing international momentum toward regulating social media use among younger users.Wed, 22 Jul 2026 18:00:00 GMThttps://cyberscoop.com/white-house-accuses-moonshot-ai-anthropic-model-distillationcst-3039A White House official accused Chinese company Moonshot AI of using large-scale distillation to reverse-engineer Anthropic's Fable model and create its own K3 product, leveraging sophisticated internal platforms and GB300 servers sourced through Thailand or newly acquired. The accusation highlights ongoing tensions over AI intellectual property protection, with U.S. frontier AI companies pushing for stronger safeguards against what they characterize as covert industrial model theft. Congressional committees are investigating a broader pattern of Chinese AI firms allegedly stealing proprietary U.S. frontier model capabilities and redistributing them as open-weight models globally.Wed, 22 Jul 2026 16:45:37 GMThttps://microsoft.com/en-us/security/blog/2026/07/22/real-world-incident-response-microsoft-and-axa-xl-strengthen-cyber-resiliencecst-3041Microsoft and AXA XL have established a partnership to integrate Microsoft Defender Experts Cybersecurity Incident Response services into AXA XL's cyber insurance offerings for policyholders. The collaboration aims to coordinate technical response, business decisions, and insurance coverage in parallel during incidents rather than sequentially, reducing response delays and risk. The model emphasizes pre-crisis alignment among security, executive, legal, and insurance teams to streamline decision-making when incidents occur.Wed, 22 Jul 2026 16:00:00 GMThttps://securityweek.com/suno-paidwork-data-breaches-affect-tens-of-millions-of-accountscst-3015Data breaches at Suno and Paidwork exposed personally identifiable information and financial data from tens of millions of accounts. Attackers leaked names, email addresses, phone numbers, passwords, and financial information from both platforms.Wed, 22 Jul 2026 15:02:11 GMThttps://securityweek.com/palo-alto-networks-to-acquire-observability-platform-provider-embracecst-3016Palo Alto Networks announced an acquisition of Embrace, an observability platform provider, extending its expansion into monitoring and observability tools beyond traditional security offerings. This follows the company's January acquisition of Chronosphere, signaling a strategic shift toward broader infrastructure visibility capabilities.Wed, 22 Jul 2026 14:58:53 GMThttps://helpnetsecurity.com/2026/07/22/swimlane-ai-soc-msspscst-3025Swimlane announced Swimlane AI SOC for MSSPs, a platform designed to enable managed security service providers to automate security operations using agentic AI. Rather than competing for customers, Swimlane positions the offering to allow MSSPs to retain their client relationships while building AI-driven SOC capabilities on the Swimlane Turbine platform.Wed, 22 Jul 2026 13:29:27 GMThttps://rapid7.com/blog/post/pt-new-products-services-q2-2026-mdrcst-3026Rapid7 released Q2 2026 product updates across detection, response, compliance, and exposure management, including bidirectional Microsoft Defender integration, Detection as Code capabilities using Terraform workflows, and ransomware prevention features for Incident Command. The company also launched updated compliance solution pages mapping platform capabilities to NIS2, NIST CSF 2.0, DORA, HIPAA, HITRUST, and GovRAMP requirements, and improved its Remediation Hub with asset-level context and reporting tools. Additional enhancements include AI pre-triaging for application security findings to reduce false positives in vulnerability scanning.Wed, 22 Jul 2026 13:28:02 GMT