35 articles — career tips, tech guides and industry insights
35 articles in Data Breaches & Incidents
SEPT
16
Healthcare technology company Veradigm (formerly Allscripts) disclosed a patient data breach on September 9, 2026 after The Gentlemen ransomware group claimed 3.5 million records; vendor credentials were stolen to access a customer-service API.
Get career tips in your inbox
One email a day — new articles, guides and course updates. No spam.
Access
Cisco Secure Email Gateway has a critical SQL injection vulnerability (CVE-2026-76461, CVSS 9.8) added to CISA KEV on September 14, 2026, with a federal remediation due date of September 17, 2026 and active exploitation by suspected China-nexus actor UAT-9686.
15
ScreenConnect CVE-2026-84869 is a 9.9 CVSS critical guest-to-host file execution flaw patched in ScreenConnect 26.6.5 on September 8, 2026. ConnectWise issued priority 1 high severity advisory. Servers not affected. Update immediately or strip TransferFiles permission.
Tesla CEO Elon Musk confirmed the company repelled a 'serious' ransomware attack in early September 2026, attributing the success to the company's internal security team. Bank Info Security reports the incident. Tesla did not pay any ransom.
A new phishing-as-a-service platform named BigBear bypassed Microsoft 365 multi-factor authentication at 258 organizations in early September 2026. BleepingComputer reports the platform uses adversary-in-the-middle techniques to steal session tokens.
Plesk patched CVE-2026-68488, a TOCTOU symlink race in Backup Manager that lets an authenticated customer escalate to root on Linux servers during subscription restores, alongside the equally rated path-traversal flaw CVE-2026-68487. Here is what admins must do this week.
Quinn Emanuel and McDermott confirmed data breaches driven by social engineering, exposing client files, Social Security numbers and health data. At least 10 Big Law firms disclosed breaches this summer. Here is what happened, who is affected, and what law firms and clients should do.
Revolut says a fraudulent request sent from a real government agency email domain tricked it into handing over customer KYC files including passports, selfies and full transaction histories. Self-proclaimed culprits now demand 10,000 bitcoin. Here is what leaked, who is at risk, and what victims should do now.
14
Ransomware negotiation services cost guide for 2026, including retainer pricing, contingency fees, top firms, and how to engage Coveware, GroupSense, and Arete.
12
Veradigm (formerly Allscripts) disclosed patient data breach after Gentlemen ransomware gang claimed the attack (BleepingComputer). Veradigm is a major US EHR and practice-management vendor serving physician practices and hospital systems.
Remote code execution vulnerability in Gitea (open-source self-hosted Git service) CVE-2026-60004 disclosed August 27, 2026. Affects self-hosted deployments. RCE allows code execution on the Gitea server - compromising source code and CI/CD credentials.
Two critical zero-day vulnerabilities in SonicWall SMA 1000 disclosed September 3, 2026: CVE-2026-83548 and CVE-2026-83549. Affects SSL VPN appliances. Active exploitation possible - patch immediately.
