Collaborate Disseminate
Matthew Gault reports: Many trains in the U.S. are vulnerable to a hack that can remotely lock a train’s brakes, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the researcher who discovered the vulnerability. The rail… Continue reading Hackers Can Remotely Trigger the Brakes on American Trains and the Problem Has Been Ignored for Years
Redazione reports: A 44-year-old man, a Romanian citizen, was arrested in Milan on charges of being the main director behind a series of cyber attacks orchestrated by the ‘Diskstation’ gang. This is a criminal organisation specialised in ransomware, ac… Continue reading Ransomware in Italy, strike at the Diskstation gang: hacker group leader arrested in Milan
There’s an update to the City of Columbus, Ohio cyberattack by Rhysida that affected 500,000 residents but also resulted in the city trying to muzzle a whistleblower who tried to inform the community of the true extent of the breach. Jordan Laird… Continue reading A year after cyber attack, Columbus could invest $23M in cybersecurity upgrades
Victoria Mossi reports: In a startling revelation for the WordPress community, a critical security breach has been uncovered in the widely used Gravity Forms plugin, signaling a sophisticated supply chain attack. According to a detailed report by Patch… Continue reading Gravity Forms Breach Hits 1M WordPress Sites
North Country HealthCare is a federally qualified community health center that provides comprehensive medical services in 14 locations in 11 communities throughout Northern Arizona. Their services include family medicine, pediatrics, obstetrics and gyn… Continue reading Stormous claims to have protected health info on 600,000 patients of North Country Healthcare. The data appear fake.
Gavin Reinke, Ashley Miller and Amanda Wellen of Alston & Bird write: On June 27, 2025, the District Court for the Middle District of Florida, on remand from the Eleventh Circuit, reversed course when it denied class certification to a group of pla… Continue reading Back from the Brink: District Court Clears Air Regarding Individualized Damages Assessment in Data Breach Cases
KUAC reports: Multiple class action lawsuits recently filed in federal court claim an Interior Alaska Native Corporation failed to take reasonable steps to protect personal data from a cyberattack last year. Court filings show at least four different p… Continue reading Multiple lawsuits filed against Doyon Ltd over April 2024 data breach and late notification
Annie Grayer and Sean Lyngaas report: Suspected Chinese hackers have broken into the email accounts of attorneys and advisers at a powerful Washington, DC, law firm in an apparent intelligence-gathering operation, the firm, Wiley Rein, told clients thi… Continue reading Chinese hackers suspected in breach of powerful DC law firm
Tushar Subhra Dutta reports: The ransomware landscape witnessed a dramatic shift in June 2025 as the Qilin ransomware group surged to become the most active threat actor, recording 81 victims and representing a staggering 47.3% increase in activity com… Continue reading Qilin Emerged as The Most Active Group, Exploiting Unpatched Fortinet Vulnerabilities
By the end of yesterday, federal agencies should all have patched. But did they? And how many others have yet to patch? Bill Toulas reports: The U.S. Cybersecurity & Infrastructure Security Agency has confirmed active exploitation of the CitrixBle… Continue reading CISA tags Citrix Bleed 2 as exploited, gives agencies a day to patch