Pass-the-Passkey: When 'Phishing-Resistant MFA' Stops Being a Compliance Answer
SpecterOps presented the Pass-the-Passkey research at Black Hat USA on 5 August 2026: more than 20 techniques against Windows 11, Microsoft Entra ID, ...
MFA
8 articles on MFA — privacy laws, security frameworks, and regulatory compliance.
The Snowflake Guilty Plea: 165 Tenants, No Vulnerability, and the MFA Control Nobody Enforced
Connor Riley Moucka pleaded guilty on 5 August 2026 to computer fraud, conspiracy, and aggravated identity theft over the 2024 Snowflake extortion cam...
INC Ransomware, SonicWall SMA 1000, and the Theft of MFA Seeds: When Patching Is Not Remediation
INC Ransomware has become the dominant actor exploiting CVE-2026-15409 and CVE-2026-15410 in SonicWall SMA 1000 appliances, with 885 victims claimed a...
43 Attorneys General, $18 Million, and a Bankrupt Company: The 23andMe Settlement Redefines Genetic Data Enforcement
A bipartisan coalition of 43 state attorneys general secured an $18 million settlement from 23andMe over the 2023 credential-stuffing breach that expo...
HIPAA Security Rule 2026: The Final Rule Is Still Pending, But OCR Enforcement Is Not — What Covered Entities Must Do Now
The HHS Office for Civil Rights targeted May 2026 for finalizing the first major HIPAA Security Rule update since 2013, but has not yet published a fi...
HIPAA Security Rule Final Rule: May 2026 Target Month, Trump Administration Uncertainty, and What to Do Either Way
OCR set May 2026 as the target month for finalizing the overhaul of the 23-year-old HIPAA Security Rule. Whether or not the rule drops this month, the...
HIPAA Security Rule Overhaul 2026: What the Most Significant Update in Two Decades Means for Healthcare Organizations
The proposed 2026 HIPAA Security Rule update is the most significant revision to federal healthcare cybersecurity requirements in over two decades. Ma...
New York DFS Part 500: What the Compliance Certification Deadline Means for Regulated Entities in 2026
The New York Department of Financial Services has moved past the first compliance certification deadline under its amended Part 500 cybersecurity regu...