The Breach News

Microsoft to Retire an Encryption Cipher That Fueled a Decade of Windows Vulnerabilities

Microsoft Phases Out Vulnerable RC4 Encryption Standard Amid Rising Security Concerns In a significant move towards bolstering cybersecurity, Microsoft has announced the discontinuation of the outdated and insecure RC4 encryption cipher, which has been a default feature in Windows for over 26 years. This decision comes in the wake of…

Read MoreMicrosoft to Retire an Encryption Cipher That Fueled a Decade of Windows Vulnerabilities

Boys Town Healthcare Data Breach Compromised Patients’ Personal Information

In a significant incident highlighting the vulnerabilities within the healthcare sector, Boys Town National Research Hospital has reported a major data breach affecting personal information of over 105,000 individuals. This breach marks a notable event as it is reported to be one of the largest incidents involving data theft in…

Read MoreBoys Town Healthcare Data Breach Compromised Patients’ Personal Information

Why State CIOs Are Investing in AI

Agentic AI, Artificial Intelligence & Machine Learning, Next-Generation Technologies & Secure Development AI Emerges as a Key Focus in Efforts to Mitigate Budget and Staffing Challenges Jennifer Lawinski • December 16, 2025 Minnesota joins a number of U.S. states investing in AI for modernization and cybersecurity risk management in 2026.…

Read MoreWhy State CIOs Are Investing in AI

Interim CEO of Coupang Issues Apology for Data Breach During Parliamentary Hearing

Coupang CEO Addresses Massive Data Breach in Parliamentary Hearing SEOUL, Dec. 17 (Yonhap) — Harold Rogers, the interim CEO of e-commerce leader Coupang Corp., publicly apologized during a parliamentary hearing for a significant breach of its customers’ personal data. This incident, which affects over 33 million individuals, has sparked widespread…

Read MoreInterim CEO of Coupang Issues Apology for Data Breach During Parliamentary Hearing

CISA Identifies 6 Vulnerabilities: Apple, Apache, Adobe, D-Link, and Joomla at Risk

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included six new security vulnerabilities in its Known Exploited Vulnerabilities (KEV) catalog, citing clear indications of ongoing exploitation. This move emphasizes the necessity for organizations to remain vigilant and proactive in their cybersecurity measures. Among the newly flagged vulnerabilities is…

Read MoreCISA Identifies 6 Vulnerabilities: Apple, Apache, Adobe, D-Link, and Joomla at Risk

Iranian Hackers Impersonate Journalists to Distribute Malware to Victims

An Iranian cyberespionage group has adopted new tactics by impersonating journalists to target individuals through LinkedIn and WhatsApp, aiming to deliver malware to their devices. This development marks a strategic shift for the “Charming Kitten” APT group, identified by Israeli cybersecurity firm Clearsky. Since July 2020, the group has been…

Read MoreIranian Hackers Impersonate Journalists to Distribute Malware to Victims

Activist Reveals 11,000 Private Messages from WikiLeaks’ Twitter Conversations

In a significant data breach, activist Emma Best has publicly released over 11,000 private messages from a Twitter group associated with WikiLeaks and its close supporters, dating from 2015 to 2017. This release has exposed the internal discussions of an organization known for disseminating confidential information. The exposed messages had…

Read MoreActivist Reveals 11,000 Private Messages from WikiLeaks’ Twitter Conversations

Echo Raises $35M to Address Cloud Vulnerabilities Using AI

Attack Surface Management, Cloud Security, Security Operations Startup Focuses on Secure Software Infrastructure Using AI to Protect Containers and VMs Michael Novinson (MichaelNovinson) • December 16, 2025 Eilon Elhadad, co-founder and CEO, Echo (Image: Echo) Echo, a startup specializing in secure software infrastructure and helmed by a former CEO of…

Read MoreEcho Raises $35M to Address Cloud Vulnerabilities Using AI