Collaborate Disseminate
On January 29, 2026, the FCC issued public notice DA 26-96: PUBLIC SAFETY AND HOMELAND SECURITY BUREAU HIGHLIGHTS BEST PRACTICES FOR DEFENDING AGAINST RANSOMWARE ATTACKS By this Public Notice, the Public Safety and Homeland Security Bureau (Bureau) of … Continue reading FCC Cybersecurity Alert and Recommendations to Communications Providers
Mathew J. Schwartz reports: The Clop digital extortion gang for years perfected a method for wringing tens of millions out of cybercrime. Find a zero-day flaw, often in file transfer software, swarm vulnerable networks and post online the sensitive dat… Continue reading Some good news: downstream victims of mass data theft campaigns are less likely to pay — incident responders
Shawn Slaght reports: Saskatchewan Information and Privacy Commissioner Grace Hession David found that a privacy breach involving an employee at the Dr. F.H. Wigmore Regional Hospital did take place. The decision found that a unit clerk in the emergenc… Continue reading Hospital employee snooped in 98 patient records, Saskatchewan privacy commissioner finds
APA reports: Personal data of employees of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) and the Council for Justice was accessed by unauthorized persons as a result of a leak caused by a vulnerability in software used by govern… Continue reading Several Dutch agencies suffer major data breach
Harvey Kong reports: Hong Kong’s privacy watchdog plans to consult lawmakers this year about introducing mandatory data breach reporting and related penalties, the body’s chief has said. Privacy Commissioner for Personal Data Ada Chung Lai-ling on Satu… Continue reading Hong Kong plans to revive privacy law requiring firms to report data breaches
Government advisories have informed entities and the public that paying ransomware gangs to get a decryptor key is no guarantee that you will get the decryptor key, or even if you get one, that none of the files will have been corrupted. Here’s a… Continue reading Nitrogen’s ransomware can’t be decrypted — even by Nitrogen
When an unfounded legal threat comes from someone in your own community, it seems especially offensive and disappointing. In this case, a security journalist received a legal threat from a cybersecurity news site. When SuspectFile journalist Marco A. D… Continue reading Legal threat: DMCA notice to SuspectFile is refuted, but it never should have happened
Chad van Alstin reports: The U.S. Department of Health and Human Services Office of the Inspector General (OIG) released a report focused on a “large Southeastern hospital” that the agency said had security vulnerabilities that could be vectors for a c… Continue reading OIG audit of hospital’s cybersecurity finds vulnerabilities in common web applications
Helen Whittle reports: The Berlin Hospital Association (BKG) has issued a warning describing a spate of seemingly “inexplicable incidents” at hospitals and healthcare facilities in the capital. These range from drone incursions over hospita… Continue reading Berlin hospitals threatened by spate of attacks
Harvard University and the University of Pennsylvania (UPenn) have more in common than just being Ivy League universities. Both suffered data breaches involving donor information, and their stolen data was leaked. Harvard On November 18, Harvard discov… Continue reading Two Ivy League universities had donor information breaches. Will donors be notified?