The Breach News

Conduent Reports Hack Now Impacts Over 25 Million Patients

Data Breach Notification, Data Security, Healthcare State Officials Investigate Breach of Back-Office Services Provider Uncovered in 2025 Marianne Kolbasuk McGee (HealthInfoSec) • February 25, 2026 The victim tally from Conduent Business Services’ hacking incident, first identified in January 2025, has now exceeded 25 million individuals nationwide. (Image: Conduent) The Conduent…

Read MoreConduent Reports Hack Now Impacts Over 25 Million Patients

Rising Insider Breach Costs Fueled by Shadow AI Usage – The HIPAA Journal

Rising Insider Breach Costs Fueled by Shadow AI Utilization In a recent development highlighted by the HIPAA Journal, insider data breach costs are experiencing a significant uptick, largely attributed to the burgeoning use of shadow artificial intelligence within organizations. This increase raises alarms for business owners keenly aware of the…

Read MoreRising Insider Breach Costs Fueled by Shadow AI Usage – The HIPAA Journal

Critical System for Oil and Gas Companies Exposed to Severe Vulnerability

Critical Vulnerability Discovered in ABB Totalflow Systems Used in Oil and Gas Sector Cybersecurity experts have revealed a significant vulnerability affecting systems employed by organizations within the oil and gas industry, which presents an opportunity for attackers to inject and execute arbitrary code. This high-severity flaw is cataloged as CVE-2022-0902,…

Read MoreCritical System for Oil and Gas Companies Exposed to Severe Vulnerability

Additional Hacking Groups Discovered Exploiting SMB Vulnerability Weeks Prior to WannaCry

The cybersecurity landscape has been shaken following the April leak of zero-day vulnerabilities and hacking tools by the Shadow Brokers, reportedly associated with the NSA’s Equation Group. This disclosure has led to numerous hacking groups and individual cybercriminals taking initiative to exploit these vulnerabilities for various malicious purposes. The release…

Read MoreAdditional Hacking Groups Discovered Exploiting SMB Vulnerability Weeks Prior to WannaCry

Report Reveals Only 1% of Security Vulnerabilities Fuel Most Cyberattacks in 2025

An extensive investigation by VulnCheck has revealed that, despite the annual surge in reported security vulnerabilities, most remain unexploited in real-world scenarios. Of the staggering 48,000 security flaws documented in 2025, only 1% were actively targeted, signaling a concerning trend where a limited set of vulnerabilities inflict the majority of…

Read MoreReport Reveals Only 1% of Security Vulnerabilities Fuel Most Cyberattacks in 2025

Feds Rush to Safeguard Cisco SD-WAN Systems During Shutdown

Governance & Risk Management, Government, Industry Specific Emergency CISA Directive Issued Amid DHS Shutdown That Complicates Cyber Operations Chris Riotta (@chrisriotta) • February 25, 2026 CISA issued a directive calling for immediate action to secure vulnerable Cisco SD-WAN systems following reports of active exploitation. (Image: Mitre/Shutterstock/ISMG) In an urgent response…

Read MoreFeds Rush to Safeguard Cisco SD-WAN Systems During Shutdown

Citrix Releases Patches for Critical Vulnerability in ADC and Gateway Products

Citrix Addresses Critical Vulnerabilities in ADC and Gateway Products Citrix has announced the release of important security updates aimed at mitigating a significant authentication bypass vulnerability present in its application delivery controller (ADC) and Gateway products. If exploited, this flaw could allow adversaries to gain unauthorized control over affected systems.…

Read MoreCitrix Releases Patches for Critical Vulnerability in ADC and Gateway Products