The Breach News

FDA Adopts a Laissez-Faire Stance on AI Devices and Software

Endpoint Security, Standards, Regulations & Compliance Agency: Guidance Prioritizes Market Innovation Over Federal Oversight Marianne Kolbasuk McGee (HealthInfoSec) • January 7, 2026 The U.S. Food and Drug Administration announces that certain AI-enabled “low-risk” health devices and clinical decision support software will not undergo regulatory scrutiny (Image: FDA). The U.S. Food…

Read MoreFDA Adopts a Laissez-Faire Stance on AI Devices and Software

Managing Employee Data Privacy and Mitigating Breach Risks

January Highlights Data Privacy Awareness Month: A Call to Action for Employers As January ushers in Data Privacy Awareness Month, businesses are prompted to closely evaluate their protocols surrounding the collection, usage, storage, and protection of employee personal information. While discussions about data privacy predominantly center on consumer data, it…

Read MoreManaging Employee Data Privacy and Mitigating Breach Risks

Looney Tunables: New Linux Vulnerability Allows Privilege Escalation on Major Distributions

A newly identified security vulnerability in the GNU C library has come to light, referred to as Looney Tunables. This flaw exists within the ld.so dynamic loader, and if exploited, could result in local privilege escalation, thereby providing malicious actors the ability to obtain root access. The vulnerability is cataloged…

Read MoreLooney Tunables: New Linux Vulnerability Allows Privilege Escalation on Major Distributions

New Mac Malware Exploits Cookies to Hijack Cryptocurrency Wallets

Tech-savvy business owners should be vigilant in light of a new threat identified in the cybersecurity landscape—malware targeting Mac users, known as CookieMiner, which pilfers web browser cookies and credentials from cryptocurrency exchange accounts. This sophisticated malware, discovered by the Palo Alto Networks security research team, is specifically engineered to…

Read MoreNew Mac Malware Exploits Cookies to Hijack Cryptocurrency Wallets

Solo Hacker Breached Data of 50 Global Companies Using Infostealers

A cybersecurity breach has exposed the private files of approximately 50 significant corporations worldwide, including notable names such as Pickett, Sekisui House, IFLUSAC, Iberia Airlines, K3G Solutions, CRRC MA, GreenBills, and CiberC. This alarming information comes from a recent investigation conducted by the Israeli cybersecurity firm Hudson Rock for its…

Read MoreSolo Hacker Breached Data of 50 Global Companies Using Infostealers

Major ATM Hack Compromises 3.2 Million Indian Debit Cards — Update Your PIN Immediately!

Massive Data Breach Compromises 3.2 Million Debit Card Details in India In a significant cybersecurity incident, approximately 3.2 million debit card details have been reportedly stolen from a range of financial institutions in India. This breach has affected major banks, including the State Bank of India (SBI), HDFC Bank, Yes…

Read MoreMajor ATM Hack Compromises 3.2 Million Indian Debit Cards — Update Your PIN Immediately!

Australia’s Scams Framework Faces Criticism for Significant Omissions

Cryptocurrency Fraud, Cybercrime, Fraud Management & Cybercrime Treasury Submissions Advocate for Comprehensive Coverage; Exemptions May Undermine Safeguards Suparna Goswami (gsuparna) • January 7, 2026 Image: Shutterstock The Australian government’s proposed Scams Prevention Framework has come under scrutiny for its decision to exclude critical entities that facilitate scams, raising concerns about…

Read MoreAustralia’s Scams Framework Faces Criticism for Significant Omissions