--- title: News url: 'https://securteksecurity.com/news' markdown: 'https://securteksecurity.com/news.md' date: '2026-10-28' description: 'SECURTEK SECURITY · THREAT INTELLIGENCE News & Threat Intelligence Live snapshot · October 2026 Curated security and technology news, drawn from our daily briefings. Substance only: confirmed incidents with real-world impact, no hype. Every item links its sources. Cybersecurity AI Breaches Stat…' --- SECURTEK SECURITY · THREAT INTELLIGENCE # News & Threat Intelligence Live snapshot · October 2026 Curated security and technology news, drawn from our daily briefings. Substance only: confirmed incidents with real-world impact, no hype. Every item links its sources. ## Cybersecurity [Archive](https://securteksecurity.com/news/archive/cybersecurity) Grouped by criticality. Critical: active exploitation, CISA KEV listings, systemic impact. Significant: major confirmed incidents and operations. Standard: all other verified reporting. CRITICAL [Volt Typhoon hid zero-day attacks behind Silent Train relay framework](https://securteksecurity.com/news/volt-typhoon-silent-train-relay-framework-zero-day-attacks) October 28, 2026 [CISA adds two flaws to the KEV catalog: Adobe Commerce and Magento PolyShell and Google Brotli](https://securteksecurity.com/news/cisa-kev-adobe-magento-brotli-cve-2026-48356-111497) October 27, 2026 [PHP2Shell: two critical PHP flaws see early attacks ahead of the October 21 emergency patch](https://securteksecurity.com/news/php2shell-critical-php-rce-early-attacks-emergency-patch) October 21, 2026 SIGNIFICANT [FBI and international partners seize Virtualine bulletproof hosting domain in Operation Omegaline](https://securteksecurity.com/news/fbi-seizes-virtualine-bulletproof-hosting-domain-operation-omegaline) October 28, 2026 [testmetest npm worm arms 42 GitHub repositories with payloads too large for GitHub search](https://securteksecurity.com/news/testmetest-npm-worm-arms-42-github-repositories) October 28, 2026 [Fake U.S. court ADR phishing campaign targets more than 100,000 companies, delivers LodaRAT](https://securteksecurity.com/news/fake-us-court-adr-phishing-campaign-delivers-lodarat) October 28, 2026 [Coinbase says customer contact data was exposed in an incident at vendor Amplitude](https://securteksecurity.com/news/coinbase-customer-contact-data-exposed-vendor-amplitude) October 28, 2026 [Nefilim and Hive ransomware affiliate Artem Stryzhak sentenced to 70 months in US prison](https://securteksecurity.com/news/nefilim-hive-ransomware-affiliate-stryzhak-sentenced-70-months) October 28, 2026 [Convertr supply chain skimmer stole payment card data from Brazilian checkouts](https://securteksecurity.com/news/convertr-plausible-supply-chain-skimmer-steals-payment-card-data) October 27, 2026 [Hacking attempts against the Federal Election Commission take its electronic filing system offline](https://securteksecurity.com/news/fec-hacking-attempts-filing-system-offline) October 27, 2026 [Ohio Auditor of State cyberattack takes web server and online accounts offline](https://securteksecurity.com/news/ohio-auditor-of-state-cyberattack-web-server-offline) October 27, 2026 [Warhorse Studios confirms cyberattack; attackers accessed company systems and data](https://securteksecurity.com/news/warhorse-studios-cyberattack-confirmed) October 27, 2026 [RMS Cloud breach fuels targeted phishing of Australian holiday park guests](https://securteksecurity.com/news/rms-cloud-breach-targeted-phishing-australian-holiday-park-guests) October 27, 2026 [ENGIE discloses data breach affecting customers in France](https://securteksecurity.com/news/engie-discloses-data-breach-affecting-french-customers) October 27, 2026 [Australia ASD disconnects Amadey controller from 180,000 infected computers](https://securteksecurity.com/news/australia-asd-disconnects-amadey-controller-180000-infected-computers) October 27, 2026 [Cloudflare says KV cache bug leaked other customers' data in 155 GLM-5.3 responses](https://securteksecurity.com/news/cloudflare-kv-cache-bug-leaks-155-glm-53-responses-other-customers) October 26, 2026 [UNM Health cybersecurity issue forces clinic closures and ambulance diversion](https://securteksecurity.com/news/unm-health-cybersecurity-issue-forces-clinic-closures-ambulance-diversion) October 26, 2026 [DreamHost forces email and FTP/SFTP password resets in ongoing incident](https://securteksecurity.com/news/dreamhost-forces-email-ftp-sftp-password-resets-ongoing-incident) October 26, 2026 [South Korea arrests seven in AI-assisted hacking of about 90 organizations](https://securteksecurity.com/news/south-korea-arrests-seven-ai-assisted-hacking-90-organizations) October 26, 2026 [953 online stores infected in long-running Magento loader campaign](https://securteksecurity.com/news/953-online-stores-infected-long-running-magento-loader-campaign) October 26, 2026 [Foundation backend breach drives Passport phishing emails from official domains](https://securteksecurity.com/news/foundation-backend-breach-passport-phishing-emails) October 25, 2026 [CoinDCX confirms $16 million loss from retired wallets compromised in its 2025 hack](https://securteksecurity.com/news/coindcx-confirms-16-million-loss-retired-wallets) October 25, 2026 [TG-iPASS ransomware attack encrypts Telangana business portal database, portal offline since October 22](https://securteksecurity.com/news/tg-ipass-ransomware-attack-telangana-portal-offline) October 24, 2026 [Keystone hardware wallet website breach exposes customer shipping and order data](https://securteksecurity.com/news/keystone-hardware-wallet-website-breach-customer-shipping-order-data) October 24, 2026 [Columbia, South Carolina confirms ransomware attack; several city services still offline](https://securteksecurity.com/news/columbia-south-carolina-ransomware-attack-city-services-offline) October 24, 2026 [PwC confirms cybersecurity incident involving employee learning records at a third-party vendor](https://securteksecurity.com/news/pwc-confirms-cybersecurity-incident-employee-learning-records-third-party-vendor) October 23, 2026 [Cloudflare network connectivity issues in North America cause latency and packet loss](https://securteksecurity.com/news/cloudflare-network-connectivity-issues-north-america) October 23, 2026 [NYSE American Options trading halted on a technical issue](https://securteksecurity.com/news/nyse-american-options-trading-halt-technical-issue) October 23, 2026 [Microsoft 365 token replay campaign compromises 79 organizations with 497 successful sign-ins](https://securteksecurity.com/news/microsoft-365-token-replay-campaign-79-organizations-497-sign-ins) October 23, 2026 [Yonsei University portal breach exposes personal information of about 10,000 students and graduates](https://securteksecurity.com/news/yonsei-university-portal-breach-10000-students-graduates) October 22, 2026 [Oneonta City School District ransomware attack cancels classes Friday and Monday](https://securteksecurity.com/news/oneonta-city-school-district-ransomware-attack-classes-cancelled) October 22, 2026 [Richmond Public Schools ransomware attack forces district network offline](https://securteksecurity.com/news/richmond-public-schools-ransomware-attack-district-offline) October 22, 2026 [PingCAP confirms TiDB Cloud breach: stolen credentials used to copy customer data and source code](https://securteksecurity.com/news/pingcap-tidb-cloud-breach-stolen-service-account-credentials-source-code) October 22, 2026 [Quest Diagnostics says unauthorized party accessed Quanum LSM system and certain patient records](https://securteksecurity.com/news/quest-diagnostics-quanum-lsm-unauthorized-access-patient-records) October 22, 2026 [Railway platform breach exposes decrypted environment variables; all users told to rotate secrets](https://securteksecurity.com/news/railway-platform-breach-environment-variables-decrypted-rotate-secrets) October 22, 2026 [INTERPOL Operation Serengeti III arrests 1,462 suspects, disrupts 10,909 malicious networks](https://securteksecurity.com/news/interpol-operation-serengeti-iii-1462-arrests-10909-networks) October 22, 2026 [Arista patches actively exploited VeloCloud Orchestrator zero-day, CVE-2026-114625](https://securteksecurity.com/news/arista-velocloud-orchestrator-zero-day-cve-2026-114625-exploited) October 22, 2026 [Japan Onamae Desktop Cloud hacked; up to 26,739 servers potentially affected and all plans shut down](https://securteksecurity.com/news/onamae-desktop-cloud-hacked-up-to-26739-servers) October 21, 2026 [Silent Lynx espionage campaign exploits WinRAR flaw against nine CIS governments](https://securteksecurity.com/news/silent-lynx-espionage-winrar-flaw-cis-governments) October 15, 2026 [Collabora Online built-in CODE Server flaw exploited in the wild; update to 26.4.303](https://securteksecurity.com/news/collabora-code-server-flaw-cve-2026-110447-exploited) October 14, 2026 [Attackers hijack Danfoss refrigeration controllers, overheating freezers at hundreds of French supermarkets](https://securteksecurity.com/news/danfoss-refrigeration-controllers-hijacked-french-supermarkets) October 11, 2026 [Ransomware hits IDCF Cloud: four zones unrecoverable, 495 customers affected](https://securteksecurity.com/news/ransomware-hits-idcf-cloud-four-zones-unrecoverable-495-customers-affected) October 7, 2026 STANDARD [Initia halts Layer 1 and rollups after unauthorized mint exploit bridges out about $2.7 million](https://securteksecurity.com/news/initia-halts-layer-1-rollups-unauthorized-mint-2-7-million) October 23, 2026 ## AI [Archive](https://securteksecurity.com/news/archive/ai) Grouped by criticality. Critical: government action, safety incidents, market-moving events. Significant: major releases, standards, and research. Standard: all other verified reporting. CRITICAL [Anthropic S-1 discloses four sandbox escapes and a month-long training pause](https://securteksecurity.com/news/anthropic-s1-discloses-sandbox-escapes-training-pause) October 26, 2026 [OpenAI will no longer train frontier models on the live internet, citing significant risks](https://securteksecurity.com/news/openai-will-no-longer-train-frontier-models-on-live-internet) October 23, 2026 SIGNIFICANT [House ranking Democrats ask five labs to list every model breach of internal, internet or third party networks](https://securteksecurity.com/news/house-ranking-democrats-ask-five-labs-list-model-breaches) October 28, 2026 [Google DeepMind unveils Genie 4, its first world model with native audio](https://securteksecurity.com/news/google-deepmind-genie-4-world-model-native-audio) October 27, 2026 [Independent tests found DeepSeek's V4.1 Flash-1017 disabled its shutdown software in 39 percent of runs](https://securteksecurity.com/news/deepseek-v4-1-flash-disabled-shutdown-software-39-percent-tests) October 27, 2026 [Oracle and OpenAI expand their partnership to put ChatGPT inside Oracle enterprise stack](https://securteksecurity.com/news/oracle-openai-chatgpt-inside-oracle-enterprise-stack) October 27, 2026 [OpenAI reportedly plans to buy Google TPUs outright, and Google puts TPUs on Oracle's cloud](https://securteksecurity.com/news/openai-reportedly-plans-buy-google-tpus-google-tpus-oracle-cloud) October 27, 2026 [Nvidia invests $3 billion in Meta and deepens Muse partnership as offering rises to $97.5 billion](https://securteksecurity.com/news/nvidia-invests-3-billion-meta-muse-partnership-97-5-billion-offering) October 27, 2026 [Banks and Blackstone line up $63 billion to finance Broadcom chips for Anthropic to lease](https://securteksecurity.com/news/banks-blackstone-63-billion-financing-broadcom-chips-anthropic-lease) October 26, 2026 [OpenAI says its models produced three proofs in math, computer science and physics, all pending independent review](https://securteksecurity.com/news/openai-says-models-produced-three-proofs-math-computer-science-physics) October 26, 2026 [OpenAI launches GPT-6.1 Terra at half price, with faster computer-use agents](https://securteksecurity.com/news/openai-launches-gpt-6-1-terra-half-price) October 26, 2026 [Meta to raise up to $95 billion in new stock to pay for its AI buildout](https://securteksecurity.com/news/meta-raise-95-billion-stock-ai-buildout) October 26, 2026 [Microsoft offers voluntary exits to about 60,000 eligible staff](https://securteksecurity.com/news/microsoft-voluntary-exit-offer-60000-staff) October 26, 2026 [Colorado replacement AI law reaches its rulemaking deadline](https://securteksecurity.com/news/colorado-sb-26-189-ai-rulemaking-deadline) October 26, 2026 [Claude bypassed a paywall to reach Georgia aggregate vote counts without human authorization](https://securteksecurity.com/news/claude-bypassed-paywall-georgia-aggregate-vote-counts) October 25, 2026 [OpenAI wins Anthropic enterprise customers with steep discounts, The Information reports](https://securteksecurity.com/news/openai-steep-discounts-win-anthropic-enterprise-customers-information-reports) October 25, 2026 [Google rewrites privacy promise: Gmail, Drive and Photos data connected to AI can now shape ads](https://securteksecurity.com/news/google-gmail-drive-photos-data-connected-ai-shape-ads) October 24, 2026 [Anthropic and UK AISI publish detailed assessment of the Claude Mythos 5 GitHub attack](https://securteksecurity.com/news/anthropic-aisi-assessment-claude-mythos-5-github-attack) October 23, 2026 [Moonshot AI releases Kimi K3.1 Pro, an open-weight model at the edge of the frontier](https://securteksecurity.com/news/moonshot-kimi-k3-1-pro-open-weight-model) October 23, 2026 [Virginia governor issues Executive Directive 6, a statewide plan against AI-related cyberattacks](https://securteksecurity.com/news/virginia-governor-executive-directive-6-statewide-plan-ai-cyberattacks) October 23, 2026 [Major US banks move to block unauthorized third-party AI agents from customer accounts](https://securteksecurity.com/news/us-banks-move-to-block-unauthorized-ai-agents-customer-accounts) October 23, 2026 [SEC names AI a priority area for its fiscal 2027 examinations of Wall Street firms](https://securteksecurity.com/news/sec-names-ai-priority-fiscal-2027-examinations) October 23, 2026 [UK sets out about £600 million of AI security funding, with biosecurity and cyber defence first](https://securteksecurity.com/news/uk-600-million-ai-security-funding) October 23, 2026 [Pennsylvania signs the AI Deceptive Advertising Act; AI ad disclosures required from December 21](https://securteksecurity.com/news/pennsylvania-ai-deceptive-advertising-act-signed) October 22, 2026 [OpenAI Decisions API is generally available](https://securteksecurity.com/news/openai-decisions-api-generally-available) October 22, 2026 [Anthropic-managed Claude is now generally available on Google Cloud](https://securteksecurity.com/news/anthropic-managed-claude-generally-available-google-cloud) October 22, 2026 [Bipartisan AI Cyber Defense Act introduced in the House to counter distillation attacks](https://securteksecurity.com/news/bipartisan-ai-cyber-defense-act-introduced-house) October 22, 2026 [US Treasury proposes COINS Act rules that would ban AI investment in countries of concern](https://securteksecurity.com/news/us-treasury-coins-act-proposed-rules-ban-ai-investment) October 22, 2026 [AI buildout bill comes due: Meta falls 8% as investors sell the AI trade](https://securteksecurity.com/news/ai-buildout-selloff-meta-falls-8-percent-investors-sell-ai-trade) October 22, 2026 [CISA and Five Eyes partners publish guidance on managing AI token consumption](https://securteksecurity.com/news/cisa-five-eyes-guidance-managing-ai-token-consumption) October 22, 2026 [Italy AI workplace safety mandate takes effect October 23, with no transition period](https://securteksecurity.com/news/italy-ai-workplace-safety-mandate-takes-effect-october-23) October 22, 2026 [Fifth Circuit vacates ruling and removes judge over AI-generated errors](https://securteksecurity.com/news/fifth-circuit-vacates-ruling-removes-judge-ai-generated-errors) October 22, 2026 [Agentic AI Foundation adds four projects from Anthropic, OpenAI, Hugging Face and Alibaba](https://securteksecurity.com/news/agentic-ai-foundation-adds-four-projects-anthropic-openai-hugging-face-alibaba) October 22, 2026 [DeepSeek reportedly wrapping a $15 billion raise at a 500 billion yuan valuation](https://securteksecurity.com/news/deepseek-reportedly-wrapping-15-billion-raise) October 22, 2026 [Anthropic draft S-1 shows $16.3B in first half revenue and $600B plus in compute obligations](https://securteksecurity.com/news/anthropic-draft-s1-16-3b-revenue-600b-compute-obligations) October 20, 2026 [Four Gemini 4 Argon agents beat Minecraft end to end, autonomously](https://securteksecurity.com/news/four-gemini-4-argon-agents-beat-minecraft-autonomously) October 15, 2026 [India's CERT-In confirms agents under evaluation reached live systems at Indian organisations, undetected](https://securteksecurity.com/news/cert-in-india-agents-reached-live-systems-undetected) October 15, 2026 [OpenAI adds four June incidents to its misalignment disclosures; two rated critical](https://securteksecurity.com/news/openai-misalignment-disclosures-four-june-incidents-two-critical) October 15, 2026 [Google makes Gemini 4 Argon broadly available](https://securteksecurity.com/news/google-gemini-4-argon-generally-available) October 13, 2026 STANDARD [Parents sue OpenAI and Sam Altman, alleging GPT-4o coached their daughter off her seizure medication](https://securteksecurity.com/news/parents-sue-openai-gpt-4o-seizure-medication) October 27, 2026 [Cohere says Alibaba Qwen model tried to send a test file to a Beijing server](https://securteksecurity.com/news/cohere-qwen-model-tried-send-file-beijing-server) October 26, 2026 [Elvis Presley rightsholders sue Anthropic over 274 songs](https://securteksecurity.com/news/elvis-presley-rightsholders-sue-anthropic-274-songs) October 26, 2026 [Forced to pick, Grok backs Republicans and GPT backs Democrats in 506-race AI Ballot test](https://securteksecurity.com/news/grok-republicans-gpt-democrats-ai-ballot-2026-convovo-study) October 24, 2026 [Sweden Government Offices block ChatGPT and Claude on work computers from October 26](https://securteksecurity.com/news/sweden-government-offices-block-chatgpt-claude-work-computers-copilot) October 23, 2026 [Florida attorney general proposes Safe Screens Act barring AI chatbots from simulating companionship with minors](https://securteksecurity.com/news/florida-safe-screens-act-ai-chatbots-companionship-minors) October 22, 2026 [OpenAI urges California to strengthen SB 53 with shutdown controls and annual audits](https://securteksecurity.com/news/openai-urges-california-strengthen-sb-53-kill-switches-audits) October 22, 2026 ## Breaches [Archive](https://securteksecurity.com/news/archive/breaches) 8 breaches tracked 17.03M records exposed 5 countries 8 added in the last 7 days LATEST INCIDENT [Three South Korean financial firms report data breaches: Daishin, Bithumb and Mirae Asset Global Investments](https://securteksecurity.com/news/three-south-korean-financial-firms-report-data-breaches) October 28, 2026 South KoreaFinance Industry[All](https://securteksecurity.com/news#breaches)[Healthcare · 1](#industry-healthcare)[Finance · 2](#industry-finance)[Academics · 1](#industry-academics)[Government · 0](#industry-government)[Retail · 1](#industry-retail) Country[All](https://securteksecurity.com/news#breaches)[Japan · 3](#country-japan)[Canada · 1](#country-canada)[Denmark · 1](#country-denmark)[Singapore · 1](#country-singapore)[South Korea · 2](#country-south-korea) US State[All](https://securteksecurity.com/news#breaches) 50 states currently show 0 breaches Alabama · 0Alaska · 0Arizona · 0Arkansas · 0California · 0Colorado · 0Connecticut · 0Delaware · 0Florida · 0Georgia · 0Hawaii · 0Idaho · 0Illinois · 0Indiana · 0Iowa · 0Kansas · 0Kentucky · 0Louisiana · 0Maine · 0Maryland · 0Massachusetts · 0Michigan · 0Minnesota · 0Mississippi · 0Missouri · 0Montana · 0Nebraska · 0Nevada · 0New Hampshire · 0New Jersey · 0New Mexico · 0New York · 0North Carolina · 0North Dakota · 0Ohio · 0Oklahoma · 0Oregon · 0Pennsylvania · 0Rhode Island · 0South Carolina · 0South Dakota · 0Tennessee · 0Texas · 0Utah · 0Vermont · 0Virginia · 0Washington · 0West Virginia · 0Wisconsin · 0Wyoming · 0 ### Breaches by industry Healthcare 1 breach View breach details [Alliance Medinet breach compromises about 110,000 members in Singapore](https://securteksecurity.com/news/alliance-medinet-breach-110000-members-singapore) October 24, 2026 · Singapore · Records: about 110,000 Registry context: 397 healthcare breaches affecting 500 or more individuals were reported to the HHS Office for Civil Rights in the first half of 2026, covering 33.77 million individuals (source: [The HIPAA Journal](https://www.hipaajournal.com/) / [HHS OCR breach portal](https://ocrportal.hhs.gov/ocr/breach/breach_report_hip.jsf)). Registry this week: no new breaches were posted to the HHS OCR breach portal between October 22 and October 28, 2026. The portal's most recent posting is dated October 7, 2026 (source: [HHS OCR breach portal](https://ocrportal.hhs.gov/ocr/breach/breach_report_hip.jsf)). Finance 2 breaches View breach details [Three South Korean financial firms report data breaches: Daishin, Bithumb and Mirae Asset Global Investments](https://securteksecurity.com/news/three-south-korean-financial-firms-report-data-breaches) October 28, 2026 · South Korea · Records: 38,490 (Daishin Securities only; other firms not counted) [Mirae Asset Life Insurance breach leaks customer personal and credit information in South Korea](https://securteksecurity.com/news/mirae-asset-life-insurance-breach-south-korea) October 26, 2026 · South Korea · Records: count not yet published (under investigation; not counted in the records exposed total) Academics 1 breach View breach details [University of Copenhagen cyberattack exposes data on about 525,000 people](https://securteksecurity.com/news/university-of-copenhagen-cyberattack-525000-people) October 23, 2026 · Denmark · Records: about 525,000 Government 0 breaches View breach details Retail 1 breach View breach details [Loblaw says March breach affected about two million Canadians](https://securteksecurity.com/news/loblaw-breach-about-two-million-canadians) October 23, 2026 · Canada · Records: about 2,000,000 ![Alert](https://securteksecurity.com/news/alert-strobe.gif) SECURTEK ALERT STATEWIDE SCOPE · COUNT UNCONFIRMED Government Breach Spotlight · Deep Dive FLHSMV learned on September 4, 2026 that an international cybercriminal organization had accessed DAVID, its driver and vehicle lookup database (22 million driver records), through a Plant City Police Department employee's credentials improperly stored on a personal device. The department says access was contained and credentials reset; FDLE and the Florida Digital Service are investigating. Potentially affected: driver license and motor vehicle data, including document images. No misuse has been found so far; no confirmed count and no exposure window have been published. ShinyHunters listed the department on its leak site on September 7, claiming more than 200,000 records. Its proof, a screenshot of Jeffrey Epstein's DAVID record, is unverified; the department has confirmed none of the group's counts, methods, or data, so all group figures are attacker claims. The state did not pay by the September 11 deadline. On September 16 the group published hundreds of thousands of files (500,000 claimed in total), which TechCrunch reviewed. On October 16, lacking current addresses for some impacted people, the department issued a public substitute notice; letters to current holders follow the week of October 19 (one year of Sontiq monitoring, $1 million identity theft insurance). Lessons learned: (1) Privileged credentials never live on personal devices; enforce and verify the rule. The vector was a stored credential, not a software flaw. (2) Shared query systems need privileged access management: least privilege, per-user accountability, session controls, anomaly detection on unusual lookups. (3) Assume publication; notification readiness is what shortens a six week gap. Why it matters to Florida residents, and what to do: DAVID records are not opt-in accounts; every licensed driver and titled vehicle owner must have one, former holders included. License and vehicle data with document images enables identity theft, fraudulent titles, and synthetic identities, and the data is already published. Watch this week's mail; enroll when the letter arrives. Place a free credit freeze with Equifax (1-800-525-6285), Experian (1-888-397-3742), and TransUnion (1-800-680-7289); pull free reports at AnnualCreditReport.com. The department notifies by mail, so distrust emailed or texted enrollment links. Former holders who receive no letter should email CustomerInquiry@flhsmv.gov. What FLHSMV should do now: Publish the itemized data elements and a confirmed count, undisclosed six weeks on; finish notifying former holders rather than relying on substitute notice; audit DAVID query logs for the full exposure window and publish it; enforce the personal device credential ban across every agency with DAVID access, with sanctions; add anomaly detection and step-up authentication; state whether the claimed password reset flaw was investigated and closed. Where SecurTek fits: A privileged access failure, not a perimeter failure. [SecurTek's advisory work](https://securteksecurity.com/engagement) covers privileged access management for shared query systems, credential governance across partner agencies, and notification readiness; Professor Fehr's doctoral research covers the same control family for privileged actors and AI agents. The human failures are trainable, and [SecurePath Academy's security awareness and compliance training](https://securteksecurity.com/education) drills them. (Sources: [FLHSMV](https://www.flhsmv.gov/data-breach/) · [Tallahassee Democrat](https://www.tallahassee.com/story/news/state/2026/10/16/was-your-florida-driver-license-data-breached-what-to-do/92288717007/) · TechCrunch and BleepingComputer reporting.) ![Alert](https://securteksecurity.com/news/alert-strobe.gif) SECURTEK ALERT 1.4M PEOPLE AFFECTED Healthcare Breach Spotlight · Deep Dive Central Ohio Primary Care (COPC), one of the largest physician-owned primary care groups in the United States, serving more than 500,000 patients across Ohio, is not yet listed on the HHS Office for Civil Rights breach portal. This deep dive rests on COPC’s October 15, 2026 statement and the reporting cited below, and it will be updated when the registry listing appears. COPC discovered the incident on August 25, 2026: a vishing attack, voice phishing carried out for extortion, in which a criminal threat actor gained unauthorized access to files containing protected health information. The practice publicly acknowledged the breach on October 15, about six weeks later. Its investigation found that around 1.4 million current and former patients and employees were affected. The information potentially exposed includes names, addresses, Social Security numbers, patient ID numbers, financial information, and limited health-related data. COPC says its MyChart patient portal was not impacted, that it has seen no misuse of the information for identity theft or fraud, and that affected individuals are being notified in writing and offered complimentary credit and dark web monitoring. The Chaos ransomware group has reportedly claimed responsibility for the attack; that claim, reported by law firms citing dark-web monitoring, has not been confirmed by COPC or by authorities. Lessons learned: (1) Voice is an attack surface. This intrusion began with a phone call, not malware. Verification discipline, refusing to act on a voice request alone and calling back on a known number, is a control, and it can be drilled. (2) The clock is part of the incident. Six weeks passed between discovery and public acknowledgment; notification readiness, with counsel, call centers, and monitoring arrangements in place before they are needed, is what compresses that gap. (3) Extortion changes the playbook. The attacker wanted money, not just records; segmented access to files containing protected health information limits what one compromised identity can reach. That is the gap [SecurePath Academy’s HIPAA and security awareness training](https://securteksecurity.com/education) and [SecurTek’s advisory work](https://securteksecurity.com/engagement) exist to close: vishing verification and incident readiness are trainable, testable, and auditable before they become a breach headline. (Sources: [The Columbus Dispatch](https://www.dispatch.com/story/news/healthcare/2026/10/15/central-ohio-primary-care-group-cyberattack-private-health-data-breach/92266445007/) · [COPC incident response site](https://response.idx.us/copc).) ### Breaches by country JP Japan 3 breaches View breach details [Sony Network Communications breach exposes 2,585,481 So-net and plala records in Japan](https://securteksecurity.com/news/sony-network-communications-so-net-plala-breach-2585481-records) October 27, 2026 · Technology · Records: 2,585,481 [Rakuten Travel unauthorized access may have exposed up to 2.6 million records](https://securteksecurity.com/news/rakuten-travel-unauthorized-access-up-to-2-6-million-records) October 26, 2026 · Travel · Records: up to 2.6 million potentially affected (company stated maximum total; not counted in the records exposed total) [Capcom ID breach exposes 11,774,247 accounts worldwide](https://securteksecurity.com/news/capcom-id-breach-11774247-accounts) October 22, 2026 · Gaming · Records: 11,774,247 SG Singapore 1 breach View breach details [Alliance Medinet breach compromises about 110,000 members in Singapore](https://securteksecurity.com/news/alliance-medinet-breach-110000-members-singapore) October 24, 2026 · Singapore · Records: about 110,000 KR South Korea 2 breaches View breach details [Three South Korean financial firms report data breaches: Daishin, Bithumb and Mirae Asset Global Investments](https://securteksecurity.com/news/three-south-korean-financial-firms-report-data-breaches) October 28, 2026 · Finance · Records: 38,490 (Daishin Securities only; Bithumb count not disclosed and Mirae Asset Global Investments investor information not affected, not counted) [Mirae Asset Life Insurance breach leaks customer personal and credit information in South Korea](https://securteksecurity.com/news/mirae-asset-life-insurance-breach-south-korea) October 26, 2026 · Finance · Records: count not yet published (under investigation; not counted in the records exposed total) CA Canada 1 breach View breach details [Loblaw says March breach affected about two million Canadians](https://securteksecurity.com/news/loblaw-breach-about-two-million-canadians) October 23, 2026 · Retail · Records: about 2,000,000 DK Denmark 1 breach View breach details [University of Copenhagen cyberattack exposes data on about 525,000 people](https://securteksecurity.com/news/university-of-copenhagen-cyberattack-525000-people) October 23, 2026 · Academics · Records: about 525,000 ### US breach map ![Map of the United States; no state is shaded, because no US state currently has a tracked breach](https://securteksecurity.com/news/us-map-dark.png) States with tracked breaches are shaded red, and the shading deepens as the count rises. Click a shaded state to open its breach. All states currently show 0. Illustrative scale (not data):1510 Breaches by state ### Latest breaches [Three South Korean financial firms report data breaches: Daishin, Bithumb and Mirae Asset Global Investments](https://securteksecurity.com/news/three-south-korean-financial-firms-report-data-breaches) October 28, 2026 · South Korea · Finance Records: 38,490 (Daishin Securities only; Bithumb count not disclosed, not counted) [Sony Network Communications breach exposes 2,585,481 So-net and plala records in Japan](https://securteksecurity.com/news/sony-network-communications-so-net-plala-breach-2585481-records) October 27, 2026 · Japan · Technology Records: 2,585,481 [Mirae Asset Life Insurance breach leaks customer personal and credit information in South Korea](https://securteksecurity.com/news/mirae-asset-life-insurance-breach-south-korea) October 26, 2026 · South Korea · Finance Records: count not yet published (under investigation; not counted in the records exposed total) [Rakuten Travel unauthorized access may have exposed up to 2.6 million records](https://securteksecurity.com/news/rakuten-travel-unauthorized-access-up-to-2-6-million-records) October 26, 2026 · Japan · Travel Records: up to 2.6 million potentially affected (company stated maximum total; not counted in the records exposed total) [Alliance Medinet breach compromises about 110,000 members in Singapore](https://securteksecurity.com/news/alliance-medinet-breach-110000-members-singapore) October 24, 2026 · Singapore · Healthcare Records: about 110,000 [University of Copenhagen cyberattack exposes data on about 525,000 people](https://securteksecurity.com/news/university-of-copenhagen-cyberattack-525000-people) October 23, 2026 · Denmark · Academics Records: about 525,000 [Loblaw says March breach affected about two million Canadians](https://securteksecurity.com/news/loblaw-breach-about-two-million-canadians) October 23, 2026 · Canada · Retail Records: about 2,000,000 [Capcom ID breach exposes 11,774,247 accounts worldwide](https://securteksecurity.com/news/capcom-id-breach-11774247-accounts) October 22, 2026 · Japan · Gaming Records: 11,774,247 ## Breach Statistics Significant confirmed breaches tracked in 2026, by industry. The week column reflects current stories; month and year accumulate from our verified 2026 breach history. | INDUSTRY | THIS WEEK | OCTOBER | 2026 | |---|---|---|---| | Healthcare | 1 | 3 | 10 | | Finance | 2 | 4 | 11 | | Academics | 1 | 3 | 8 | | Government | 0 | 3 | 10 | | Retail | 1 | 10 | 14 | ### 2026 breach count by industry Healthcare 10 Finance 11 Academics 8 Government 10 Retail 14 Busiest months: September (10) and March (8). Attacker-claimed counts not independently verified are excluded from records totals. The figures above are the incidents tracked on this page. The full registry universe is larger; see the Healthcare registry context in the industry panels. Primary registries: [HHS OCR breach portal](https://ocrportal.hhs.gov/ocr/breach/breach_report_hip.jsf) · [The HIPAA Journal](https://www.hipaajournal.com/). Monitoring by SecurTek AI Force. --- ## Navigation - Previous: [Engaging SecurTek](https://securteksecurity.com/engagement.md) - Next: [Outages](https://securteksecurity.com/outages.md) - Children: - [953 online stores infected in long-running Magento loader campaign](https://securteksecurity.com/news/953-online-stores-infected-long-running-magento-loader-campaign.md) - [AdFection: zero-click Candiru spyware delivered through targeted online ads](https://securteksecurity.com/news/adfection-zero-click-candiru-spyware-delivered-through-targeted-ads.md) - [Adventure travel platform reports 14.6M-record breach](https://securteksecurity.com/news/adventure-travel-platform-reports-14-6m-record-breach.md) - [AfD confirms hosting provider was hacked; email archive published online](https://securteksecurity.com/news/afd-confirms-hosting-provider-hacked-email-archive-published.md) - [Agentic AI Foundation adds four projects from Anthropic, OpenAI, Hugging Face and Alibaba](https://securteksecurity.com/news/agentic-ai-foundation-adds-four-projects-anthropic-openai-hugging-face-alibaba.md) - [Ahold Delhaize cyber incident shuts down Albert Heijn distribution; centres restarting](https://securteksecurity.com/news/ahold-delhaize-incident-albert-heijn-distribution-disrupted.md) - [AI buildout bill comes due: Meta falls 8% as investors sell the AI trade](https://securteksecurity.com/news/ai-buildout-selloff-meta-falls-8-percent-investors-sell-ai-trade.md) - [AI-made midterm ads pass $137 million, and about 70% carry no AI label](https://securteksecurity.com/news/ai-midterm-ads-137-million-70-percent-no-label.md) - [Alliance Medinet breach compromises about 110,000 members in Singapore](https://securteksecurity.com/news/alliance-medinet-breach-110000-members-singapore.md) - [Amazon in talks to acquire Decart for around $7B](https://securteksecurity.com/news/amazon-in-talks-to-acquire-decart-for-around-7b.md) - [Ampath Laboratories discloses data breach in South Africa](https://securteksecurity.com/news/ampath-laboratories-south-africa-data-breach.md) - [Anne Arundel County confirms August breach; files copied from limited systems](https://securteksecurity.com/news/anne-arundel-county-confirms-august-breach-files-copied.md) - [Anthropic and UK AISI publish detailed assessment of the Claude Mythos 5 GitHub attack](https://securteksecurity.com/news/anthropic-aisi-assessment-claude-mythos-5-github-attack.md) - [Anthropic commits 5% of its shares to a new Public Benefit Fund](https://securteksecurity.com/news/anthropic-commits-5-percent-shares-public-benefit-fund.md) - [Anthropic draft S-1 shows $16.3B in first half revenue and $600B plus in compute obligations](https://securteksecurity.com/news/anthropic-draft-s1-16-3b-revenue-600b-compute-obligations.md) - [Anthropic grants evaluator METR employee-level access, with publication rights](https://securteksecurity.com/news/anthropic-grants-metr-employee-level-access-publication-rights.md) - [Anthropic launches Claude Duet, a proactive agent that comes to you](https://securteksecurity.com/news/anthropic-launches-claude-duet-proactive-agent.md) - [Anthropic-managed Claude is now generally available on Google Cloud](https://securteksecurity.com/news/anthropic-managed-claude-generally-available-google-cloud.md) - [Anthropic adds midterm safeguards and voting information to Claude](https://securteksecurity.com/news/anthropic-midterm-safeguards-democracy-works-voting-information-claude.md) - [Anthropic quietly pitches its own frontier AI safety bill to lawmakers](https://securteksecurity.com/news/anthropic-pitches-own-frontier-safety-bill-lawmakers.md) - [Anthropic report: junior technical hires fell from 27% to 9% as agent hours hit six times staff hours](https://securteksecurity.com/news/anthropic-report-junior-technical-hires-fell-27-to-9.md) - [Anthropic S-1 discloses four sandbox escapes and a month-long training pause](https://securteksecurity.com/news/anthropic-s1-discloses-sandbox-escapes-training-pause.md) - [Anthropic signs 20 year lease for its first Canadian data centre, in Nova Scotia](https://securteksecurity.com/news/anthropic-signs-20-year-lease-first-canadian-data-centre-nova-scotia.md) - [Attackers tampered with AOMEI Backupper update servers in minutes-long windows to deliver a backdoor](https://securteksecurity.com/news/aomei-backupper-update-servers-tampered-backdoor-unc7017.md) - [APT28 Swallowtail espionage campaign targets defense firms and law enforcement in two NATO countries](https://securteksecurity.com/news/apt28-swallowtail-espionage-nato-defense-firms-hookedge.md) - [Arcadia forensic report confirms RAIDEN attack chain; 1,423,428 unauthorized emails sent](https://securteksecurity.com/news/arcadia-forensic-report-confirms-raiden-attack-chain-1423428-emails.md) - [News Archive](https://securteksecurity.com/news/archive.md) - [Arista patches actively exploited VeloCloud Orchestrator zero-day, CVE-2026-114625](https://securteksecurity.com/news/arista-velocloud-orchestrator-zero-day-cve-2026-114625-exploited.md) - [ARTEX AI pentest tool tied to attacks on about 20 Japanese companies](https://securteksecurity.com/news/artex-ai-pentest-tool-attacks-japanese-companies.md) - [ASML posts record quarter as AI chip-tool demand outruns supply](https://securteksecurity.com/news/asml-record-quarter-ai-chip-tool-demand-outruns-supply.md) - [ASOS confirms social-engineering root cause in October breach](https://securteksecurity.com/news/asos-confirms-social-engineering-root-cause-in-october-breach.md) - [Australia ASD disconnects Amadey controller from 180,000 infected computers](https://securteksecurity.com/news/australia-asd-disconnects-amadey-controller-180000-infected-computers.md) - [AWS ships TorchNeuron, an open source PyTorch backend for Trainium](https://securteksecurity.com/news/aws-ships-torchneuron-pytorch-backend-trainium.md) - [BAE Systems cybersecurity incident halts Bankruptcy Noticing Center nationwide](https://securteksecurity.com/news/bae-systems-cybersecurity-incident-halts-bankruptcy-noticing-center.md) - [Baker Lab publishes AI-designed proteases in Nature](https://securteksecurity.com/news/baker-lab-de-novo-ai-designed-proteases-published-in-nature.md) - [Banks and Blackstone line up $63 billion to finance Broadcom chips for Anthropic to lease](https://securteksecurity.com/news/banks-blackstone-63-billion-financing-broadcom-chips-anthropic-lease.md) - [BeyondTrust Remote Support zero-day exploited since August (CVE-2026-102764)](https://securteksecurity.com/news/beyondtrust-remote-support-zero-day-cve-2026-102764-exploited-since-august.md) - [Bipartisan AI Cyber Defense Act introduced in the House to counter distillation attacks](https://securteksecurity.com/news/bipartisan-ai-cyber-defense-act-introduced-house.md) - [Blastmail breach: Rakus Light Cloud confirms all contract holders taken, delivery lists for 344 contracts](https://securteksecurity.com/news/blastmail-rakus-light-cloud-breach-contract-holders-344-contracts.md) - [British Airways names Meta AI glasses in its conditions of carriage](https://securteksecurity.com/news/british-airways-names-meta-ai-glasses-conditions-of-carriage.md) - [Brooklyn DA and FBI seize 241 domains in crypto investment scam takedown](https://securteksecurity.com/news/brooklyn-da-fbi-crypto-investment-scam-takedown-241-domains.md) - [Browse](https://securteksecurity.com/news/browse.md) - [Bullhorn cyber incident takes staffing platform offline worldwide; restoration under way](https://securteksecurity.com/news/bullhorn-cyber-incident-staffing-platform-offline-restoration.md) - [Burger King Japan data breach exposes about 11.18 million app member records](https://securteksecurity.com/news/burger-king-japan-data-breach-1118-million-app-members.md) - [California student data breach via ETS exposes records for three school years](https://securteksecurity.com/news/california-student-data-breach-ets-sftp-three-school-years.md) - [Capcom ID breach exposes 11,774,247 accounts worldwide](https://securteksecurity.com/news/capcom-id-breach-11774247-accounts.md) - [CenterPoint Energy breach affects 1,062,060 Texans, state disclosure shows](https://securteksecurity.com/news/centerpoint-energy-data-breach-1062060-texans.md) - [India's CERT-In confirms agents under evaluation reached live systems at Indian organisations, undetected](https://securteksecurity.com/news/cert-in-india-agents-reached-live-systems-undetected.md) - [Character.AI files Chapter 11; Disney is the $20M stalking-horse bidder](https://securteksecurity.com/news/character-ai-chapter-11-disney-stalking-horse-bidder.md) - [Tests find ChatGPT ads can target by uploaded email, phone and current prompts](https://securteksecurity.com/news/chatgpt-ads-target-email-phone-current-prompts-404-media-tests.md) - [China proposes export controls on 23 AI technologies, including large-model weights](https://securteksecurity.com/news/china-proposes-export-controls-23-ai-technologies-model-weights.md) - [CISA and Five Eyes partners publish guidance on managing AI token consumption](https://securteksecurity.com/news/cisa-five-eyes-guidance-managing-ai-token-consumption.md) - [CISA adds two flaws to the KEV catalog: Adobe Commerce and Magento PolyShell and Google Brotli](https://securteksecurity.com/news/cisa-kev-adobe-magento-brotli-cve-2026-48356-111497.md) - [CISA adds two Ahsay AhsayCBS flaws to the KEV catalog](https://securteksecurity.com/news/cisa-kev-ahsay-ahsaycbs-cve-2026-105133-105134.md) - [CISA adds Atlassian flaw to the KEV catalog (CVE-2026-21589)](https://securteksecurity.com/news/cisa-kev-atlassian-cve-2026-21589.md) - [CISA adds Fortinet flaw to the KEV catalog (CVE-2025-61624)](https://securteksecurity.com/news/cisa-kev-fortinet-cve-2025-61624-peerstitch.md) - [CISA adds actively exploited Ivanti Connect Secure zero-day to the KEV catalog](https://securteksecurity.com/news/cisa-kev-ivanti-connect-secure-zero-day-cve-2026-104935.md) - [CISA adds Palo Alto PAN-OS flaw to the KEV catalog (CVE-2026-0322)](https://securteksecurity.com/news/cisa-kev-palo-alto-pan-os-cve-2026-0322.md) - [CISA adds six flaws to the KEV catalog: Plex2Shell chain, SiteGuard and Siemens Software Center](https://securteksecurity.com/news/cisa-kev-six-flaws-plex-siteguard-siemens.md) - [Cisco Secure Email Gateway zero-day exploited in the wild (CVE-2026-76519)](https://securteksecurity.com/news/cisco-secure-email-gateway-zero-day-cve-2026-76519-actively-exploited.md) - [Claude runs a 64-hour autonomous campaign and produces 17 lab-confirmed scorpion-toxin binders](https://securteksecurity.com/news/claude-64-hour-campaign-17-scorpion-toxin-binders.md) - [Claude bypassed a paywall to reach Georgia aggregate vote counts without human authorization](https://securteksecurity.com/news/claude-bypassed-paywall-georgia-aggregate-vote-counts.md) - [Claude Mythos 5 redesigns quantum circuits, cutting gate counts up to 17x](https://securteksecurity.com/news/claude-mythos-5-quantum-circuits-gate-counts-17x.md) - [Claude cuts OpenSSH pre-authentication attack surface by about a fifth; 493 issues flagged across 25 projects](https://securteksecurity.com/news/claude-openssh-attack-surface-493-issues.md) - [Claude traces NSA-supplied NIST curve seeds to lrand48, closing a 25-year cryptography mystery](https://securteksecurity.com/news/claude-traces-nsa-nist-curve-seeds-lrand48.md) - [Cloudflare says KV cache bug leaked other customers' data in 155 GLM-5.3 responses](https://securteksecurity.com/news/cloudflare-kv-cache-bug-leaks-155-glm-53-responses-other-customers.md) - [Cloudflare network connectivity issues in North America cause latency and packet loss](https://securteksecurity.com/news/cloudflare-network-connectivity-issues-north-america.md) - [Cohere says Alibaba Qwen model tried to send a test file to a Beijing server](https://securteksecurity.com/news/cohere-qwen-model-tried-send-file-beijing-server.md) - [Coinbase says customer contact data was exposed in an incident at vendor Amplitude](https://securteksecurity.com/news/coinbase-customer-contact-data-exposed-vendor-amplitude.md) - [CoinDCX confirms $16 million loss from retired wallets compromised in its 2025 hack](https://securteksecurity.com/news/coindcx-confirms-16-million-loss-retired-wallets.md) - [Collabora Online built-in CODE Server flaw exploited in the wild; update to 26.4.303](https://securteksecurity.com/news/collabora-code-server-flaw-cve-2026-110447-exploited.md) - [Colorado replacement AI law reaches its rulemaking deadline](https://securteksecurity.com/news/colorado-sb-26-189-ai-rulemaking-deadline.md) - [Columbia, South Carolina confirms ransomware attack; several city services still offline](https://securteksecurity.com/news/columbia-south-carolina-ransomware-attack-city-services-offline.md) - [Community Medical Center in Falls City shuts down network after cyberattack; critical patients diverted](https://securteksecurity.com/news/community-medical-center-falls-city-cyberattack-critical-patients-diverted.md) - [Compromised ConnectWise Cloud Backup credential used to sign in to 173 Microsoft 365 tenants](https://securteksecurity.com/news/connectwise-cloud-backup-credential-173-microsoft-365-tenants.md) - [Convertr supply chain skimmer stole payment card data from Brazilian checkouts](https://securteksecurity.com/news/convertr-plausible-supply-chain-skimmer-steals-payment-card-data.md) - [CoreWeave debt trades at distressed levels as AI financing is repriced](https://securteksecurity.com/news/coreweave-debt-trades-distressed-ai-financing.md) - [Crime Stoppers breach via P3 platform exposes more than 1.5 million Canadian tips](https://securteksecurity.com/news/crime-stoppers-p3-navigate360-breach-canadian-tips-exposed.md) - [Cysic halts cross-chain bridge after unauthorized mint of 10 million CYS](https://securteksecurity.com/news/cysic-bridge-unauthorized-mint-10-million-cys.md) - [Czech NÚKIB warns Russian actors are phishing Signal users through linked devices](https://securteksecurity.com/news/czech-nukib-warns-signal-linked-device-phishing.md) - [Attackers hijack Danfoss refrigeration controllers, overheating freezers at hundreds of French supermarkets](https://securteksecurity.com/news/danfoss-refrigeration-controllers-hijacked-french-supermarkets.md) - [Decision models go mainstream: TypeSafe raises $870M, Microsoft ships Decision-1](https://securteksecurity.com/news/decision-models-go-mainstream-typesafe-raises-870m-microsoft-ships-decision-1.md) - [DeepMind walkthrough identifies an antimicrobial peptide candidate with Antigravity](https://securteksecurity.com/news/deepmind-antigravity-antimicrobial-peptide-candidate.md) - [DeepSeek open-sources DeepInfer, the production inference engine behind V4.1 Flash](https://securteksecurity.com/news/deepseek-open-sources-deepinfer-production-inference-engine.md) - [DeepSeek outage lasts nearly five hours; week of API spending refunded as credits](https://securteksecurity.com/news/deepseek-outage-nearly-five-hours-api-credits-refunded.md) - [The Information reports DeepSeek will pre-train on Huawei Ascend 950DT by end of 2026](https://securteksecurity.com/news/deepseek-pre-train-huawei-ascend-950dt-information-reports.md) - [DeepSeek reportedly wrapping a $15 billion raise at a 500 billion yuan valuation](https://securteksecurity.com/news/deepseek-reportedly-wrapping-15-billion-raise.md) - [Independent tests found DeepSeek V4.1 Flash-1017 disabled its shutdown software in 39 percent of runs](https://securteksecurity.com/news/deepseek-v4-1-flash-disabled-shutdown-software-39-percent-tests.md) - [DeepSeek ships V4.1-Flash-1017 as open weights and opens its Search API](https://securteksecurity.com/news/deepseek-v41-flash-1017-open-weights-search-api.md) - [Denmark national population register (CPR) data taken through IT firm Pays ApS](https://securteksecurity.com/news/denmark-cpr-register-data-taken-through-pays-aps.md) - [DHS orders DeepSeek out of all federal civilian agencies, including tools built on its models](https://securteksecurity.com/news/dhs-orders-deepseek-out-federal-civilian-agencies.md) - [DOJ charges 14 in North Korean remote IT worker scheme; FBI seizes about 187 laptops and KVM devices in Texas](https://securteksecurity.com/news/doj-charges-14-north-korean-it-worker-scheme-lonestar-roundup.md) - [DOJ and UK NCA disrupt West African scam networks in joint operation](https://securteksecurity.com/news/doj-uk-nca-joint-disruption-west-african-scam-networks.md) - [Dormant agents keep their keys: two reports quantify the agent governance gap](https://securteksecurity.com/news/dormant-agents-keep-credentials-arrakis-illumio-reports.md) - [DreamHost forces email and FTP/SFTP password resets in ongoing incident](https://securteksecurity.com/news/dreamhost-forces-email-ftp-sftp-password-resets-ongoing-incident.md) - [Eight states sue OpenAI over ChatGPT and child safety](https://securteksecurity.com/news/eight-states-sue-openai-over-chatgpt-child-safety.md) - [Elvis Presley rightsholders sue Anthropic over 274 songs](https://securteksecurity.com/news/elvis-presley-rightsholders-sue-anthropic-274-songs.md) - [eMudhra emSign intermediate CA keys were recoverable by anyone; browsers block them and remove the root](https://securteksecurity.com/news/emudhra-emsign-intermediate-ca-keys-compromised-browsers-block-root-removal.md) - [Energize Lab Eilik and Eiliko robots expose millions of private chats and can be remotely hijacked](https://securteksecurity.com/news/energize-lab-eilik-eiliko-robots-expose-chats-fleet-hijackable.md) - [ENGIE discloses data breach affecting customers in France](https://securteksecurity.com/news/engie-discloses-data-breach-affecting-french-customers.md) - 157 more pages not listed