Topic
84 articles
Cyber AttackDental healthcare provider Park Dental Partners files SEC Form 8-K Item 1.05 following unauthorized network intrusion risking patient clinical records and sensitive PII.
Data BreachOncology medical technology leader Novocure files SEC Form 8-K Item 1.05 disclosing an unauthorized intrusion compromising clinical data and IT infrastructure.
Cyber AttackCenterPoint Energy files Form 8-K disclosing an unauthorized intrusion into customer account systems via external-facing web portal infrastructure.
MicrosoftDigital forensics analysis dissects how threat actors leverage leaked cloud credentials and cross-account IAM role assumptions to exfiltrate enterprise storage.
MicrosoftRegulatory analysis of recent SEC 8-K Item 1.05 disclosures details how threat actors leverage leaked cloud credentials and misconfigured storage to steal enterprise data.
Active ExploitCISA alerts enterprises to active exploitation of CVE-2026-72898, a critical SQL injection flaw in Metabase analytics dashboards allowing database exfiltration.
Data BreachThe Data Protection Board of India establishes mandatory breach disclosure workflows, Significant Data Fiduciary obligations, and statutory ₹250 Crore penalties.
MicrosoftForensic examination of SEC Item 1.05 material cyber filings reveals how compromised IAM credentials and public S3/Blob storage enable rapid data exfiltration.
Threat IntelFederal agencies face urgent remediation deadlines as CISA confirms active exploitation of CVE-2023-49105, allowing attackers to access and delete cloud storage files without credentials.
Data BreachFlorida’s motor vehicle department confirmed an intrusion into its DAVID database after an officer’s credentials were stolen by infostealers; ShinyHunters claims 200,000+ driver records.
VulnerabilityIDScan.net says an unauthorized party may have accessed or copied cloud-account customer information, including names and government ID numbers.
Emerging crews Storm and Krybit claimed attacks on two healthcare providers, with a combined 244 GB of patient and employee data alleged stolen.