Apple on Monday officially released iOS 26.5 with support for end-to-end encryption (E2EE) to Rich Communication Services (RCS) in beta as part of a "cross-industry effort" to replace traditional SMS with a more secure alternative. To that end, E2EE RCS messaging is rolling out t…
California Attorney General Rob Bonta announced a proposed $12.75 million settlement agreement with General Motors (GM) over allegations that the company violated the California Consumer Privacy Act (CCPA). [...]
Production-version patches are coming online and should be installed pronto.
Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been published on the Jenkins Marketplace. [...]
A security researcher has released a proof-of-concept tool named GhostLock that demonstrates how a legitimate Windows file API can be abused in attacks to block access to files stored locally or on SMB network shares. [...]
Google researchers say hackers used AI to develop zero-day exploits, Android backdoors, and automated supply chain attacks targeting GitHub and PyPI.
The Federal Communications Commission eased some restrictions and pushed back deadlines for foreign router manufacturers, but the ban is still in place.
Security controls can do only so much. Here are four attacks where your employees are usually your first, and only, line of cyber defense.
As part of Dark Reading's 20th anniversary special coverage, we profile the CISOs, founders, researchers, criminals, and policymakers who rewrote the enterprise risk playbook.
Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace. "If you are using Checkmarx Jenkins AST plugin, you need to ensure that you are using the version 2.0.13-829.vc72453fa_1c16 that was published on December 17, 2025 …
A threat actor named Mr_Rot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments. The attack exploits CVE-2026-41940, a vulnerability impacting cPanel and WebHost Manager (WHM…
Starts July 14th - This virtual collaborative experience will bring together health care interoperability leaders, implementers, and innovators for three days of hands-on testing, shared learning, and alignment on how emerging CMS policies and FHIR-based solutions are taking shap…
March 2026 Healthcare Data Breach Report The HIPAA Journal
In March 2026, 44 healthcare data breaches affecting 500 or more individuals were reported to the HHS’ Office for Civil […] The post March 2026 Healthcare Data Breach Report appeared first on The HIPAA Journal.
Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence (AI) system, marking the first time the technology has been put to use in the wild in a malicious context for vulnerabi…
Education technology giant Instructure has confirmed that a security vulnerability allowed hackers to modify Canvas login portals and leave an extortion message. [...]
The decision to wind down the operation in Santa Rosa in about two years comes as the medtech giant combines several businesses within its cardiovascular portfolio.
The privilege escalation vulnerability, which is similar to other Linux flaws like Copy Fail and Dirty Pipe, may already be under limited exploitation.
The EHIgnite Challenge is a national ASTP/ONC innovation competition offering $490,000 to spark new innovation for tools that will export EHI into usable insights for patients, clinicians, and payers. Phase 1 NOW EXTENDED to May 20. Winners are invited to Phase 2. The post The EH…
With a recent initial public offering, CEO Richard Foust hopes to make the company’s vagus nerve stimulation treatment the standard of care for stroke.
