Collaborate Disseminate
Martin Matishak reports: A top U.S. spy agency will resemble a college for a while on Friday, as it hosts a first-of-its-kind reunion for alumni of its most secretive hacking unit. The National Security Agency will welcome back to campus potentially hu… Continue reading NSA to host a hacker reunion in bid to rebuild secretive unit
Jonathan Greig reports; Chinese government hackers used tools known as “QScan” and “QTRouter” to breach multiple federal agencies since 2018, the Department of Justice said in announcing the takedown of the platforms on Wednesday. The tools were run by… Continue reading US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate
Since its emergence in May 2025, DireWolf has attacked several U.S. healthcare entities, as listed among its more than 100 targets on its dedicated leak site. As early analysts reporting on the group have noted, DireWolf encrypts victims’ files a… Continue reading National Kidney Registry allegedly hacked by DireWolf ransomware group
Here’s one we missed last week. Hannah Spray reports: The personal information of more than 2,000 people was stolen from Autism Services of Saskatoon during a data breach last year. In the aftermath, the organization properly notified the affecte… Continue reading A recommendation from the Saskatchewan Information and Privacy Commissioner caught our eye
Giles Bruce reports: Patients at Fort Worth, Texas-based JPS Health Network are facing lasting consequences from a network outage that stretched nearly two weeks, the Fort Worth Star-Telegram reported. JPS Health Network operated under a “controlled ne… Continue reading 2 weeks after JPS Health Network outage, patients still dealing with fallout
Vaughn Stupart, Matthew W. Van Hise, and Craig A. Hoffman of BakerHostetler write: One ruling is not a trend. And there can be unique factors at play in regulatory investigations related to large incidents. But a summary judgment ruling in favor of a s… Continue reading ‘Close Enough’ Data Breach Notifications Create Exposure
Sharman Gill reports: … BYU research finds that EdTech vendors don’t always meet their student privacy obligations; that research has led to new Utah legislation that tightens up the privacy issues. In an August 2025 investigation report prepare… Continue reading New Utah law protects student privacy after BYU research found K-12 apps were collecting and sharing data
Hudson Rock’s InfoStealers has an interesting story. From their Executive Summary: In May 2023, an infostealer infected a computer belonging to the Military Police Investigation Section in Suluk, northern Syria – a unit of the Turkish-backed Syri… Continue reading Inside a Syrian Interrogation Room: The Detainee Files an Infostealer Stole From a Military Police Unit
Chad Van Alstin reports: Numerous health systems across the country have issued alerts, warning patients to ignore scam messages that are attempting to phish passwords from patients, allowing hackers to gain access to Epic Systems’ MyChart patient port… Continue reading Health systems warn of coordinated phishing targeting Epic’s patient portal
This is one of those headlines where our first thought was “Uh oh!” but then we read more and thought “Hmmm…” Ko Jae-woo reports: Seoul National University Hospital has not filed a mandatory cybersecurity disclosure for ye… Continue reading Seoul National University Hospital skips cybersecurity disclosure for years despite breach affecting 830,000