The Breach News

Study Reveals 1.2 Million Medical Devices Vulnerable Online

Recent revelations highlight a critical vulnerability within the healthcare sector, where millions of medical devices are at risk due to inadequate security measures, including default credentials and weak passwords. Soufian El Yadmani, CEO and co-founder of Modat, shared insights from recent research indicating that these security misconfigurations expose sensitive medical…

Read MoreStudy Reveals 1.2 Million Medical Devices Vulnerable Online

Google’s March 2025 Android Security Update Addresses Two Actively Exploited Vulnerabilities

Google has published its March 2025 Android Security Bulletin, addressing a staggering total of 44 vulnerabilities. Among these, two high-severity vulnerabilities have been flagged as actively exploited in real-world settings. This ongoing risk emphasizes the necessity for business owners to maintain vigilance in their cybersecurity posture. The first vulnerability, identified…

Read MoreGoogle’s March 2025 Android Security Update Addresses Two Actively Exploited Vulnerabilities

Texas Enacts New Law Addressing AI and Health Record Storage

Recent updates to Texas health information legislation, which came into effect on September 1, introduce several critical provisions with implications for artificial intelligence and health record data management. Regulatory attorney Rachel Rose outlines the significance of this new state law, especially for organizations within the healthcare sector. Texas Senate Bill…

Read MoreTexas Enacts New Law Addressing AI and Health Record Storage

Stellantis Identifies Security Breach at Third-Party Provider Affecting North American Customers

Stellantis Reports Unauthorized Access to Customer Service Platform Stellantis, the parent company of Chrysler, announced on Sunday that it had identified unauthorized access to a third-party platform that supports its North American customer service operations. The automaker stated that while the incident is still being investigated, it has confirmed that…

Read MoreStellantis Identifies Security Breach at Third-Party Provider Affecting North American Customers

CISA Issues Warning: Active Exploitation of Vulnerabilities in Cisco, Hitachi, Microsoft, and Progress

On Monday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities (KEV) catalog, adding five notable security flaws affecting widely used software from Cisco, Hitachi Vantara, Microsoft Windows, and Progress WhatsUp Gold. This update underscores the urgent need for organizations to address vulnerabilities that have been…

Read MoreCISA Issues Warning: Active Exploitation of Vulnerabilities in Cisco, Hitachi, Microsoft, and Progress