Image of a lock.

2 min read

RaccoonO365 phishing network regroups after Microsoft and Cloudflare takedown

In September 2025, Microsoft’s Digital Crimes Unit (DCU) and Cloudflare dismantled the RaccoonO365 phishing-as-a-service network, which had been active since September 2024 and was responsible for stealing more than 5,000 Microsoft 365 credentials...

Read More
Image of an Apple device.

2 min read

Apple extends zero-day security patches to legacy devices

Apple released security updates to backport patches to older iPhones and iPads, addressing a zero-day vulnerability that attackers exploited in...

Read More
Image of a hooded figure.

2 min read

North Korean hackers pose as recruiters in global attacks

A new campaign by North Korean state-backed hackers has compromised hundreds of professionals by impersonating recruiters on platforms like Slack.

Read More
provider hand on tablet

2 min read

Nurses fired in Washington over alleged HIPAA violations

Fifteen nurses have been fired, but their union is fighting allegations and demanding the nurses be reinstated.

Read More
Is Obsidian HIPAA compliant? (2025 update)

1 min read

Is Obsidian HIPAA compliant? (2025 update)

Based on our research, Obsidian is not HIPAA compliant because it does not meet the requirements set by the U.S. Department of Health and Human...

Read More
cms logo

2 min read

CMS opens $50B rural health program application period

The Centers for Medicare & Medicaid Services announced September 15 that states can now apply for funding from the $50 billion Rural Health...

Read More
Image of a lock.

2 min read

Medical Associates of Brevard exposes data of nearly 247,000 in ransomware attack

Medical Associates of Brevard has confirmed a ransomware attack affecting 246,711 patients after the BianLian cybercrime group breached the Florida...

Read More
Image of a downtown area in North Korea.

2 min read

US sanctions North Korean IT network aiding weapons program

New sanctions target individuals and companies facilitating illicit IT worker schemes linked to North Korea.

Read More
digital money sign

2 min read

Adena Health to pay $17.8M over patient data sharing via tracking pixels

The Ohio-based nonprofit will settle claims that it unlawfully shared sensitive health data with third parties through embedded website tools.

Read More
hhs logo

1 min read

HHS updates HIPAA security risk assessment tool

A new version of the SRA Tool aims to improve HIPAA compliance and reduce common risk assessment failures.

Read More
floating digital icons

2 min read

Google fined €325M for inserting ads in Gmail, misusing cookies in France

The CNIL has penalized Google for advertising practices in Gmail and cookie consent violations impacting over 74 million users in France.

Read More
calculator with floating fraud text

3 min read

Couple pleads guilty to stealing Montefiore patient data in $1M fraud scheme

A former Montefiore Medical Center employee and her partner pleaded guilty to using stolen patient information to commit nearly $1 million in fraud.

Read More
cvs health

2 min read

CVS Health under HIPAA investigation over patient data in political campaign

Federal lawmakers are probing whether CVS Health misused patient data to oppose state legislation that threatened its business operations in...

Read More