19 articles on vendor-risk — privacy laws, security frameworks, and regulatory compliance.
An extortion group calling itself Shadowbyt3$ stole roughly 859 MB of Nintendo of America employee data — including W-9 tax forms and bank statement P...
The extortion group World Leaks published nearly 19,000 files (14.3 GB) tied to India's Kudankulam Nuclear Power Plant. The plant operator's systems w...
Conduent Business Solutions told federal regulators on June 4, 2026 that 62,224,658 people had data exposed in a SafePay ransomware intrusion — the th...
Angelo Martino, a professional ransomware negotiator at incident response firm DigitalMint, was sentenced to 70 months in prison for secretly working ...
Sysdig says JADEPUFFER is the first documented ransomware operation run end-to-end by an LLM agent — it broke into a Langflow instance via CVE-2025-32...
A threat actor called 888 is selling what they claim is 35 GB of Accenture source code, plus RSA keys, SSH keys, Azure personal access tokens, and sto...
Weeks after Washington forced Anthropic's Mythos model offline, OpenAI released its most capable models — GPT-5.6 Sol, Terra, and Luna — to roughly 20...
Anthropic told the U.S. Senate that operators tied to Alibaba's Qwen lab ran 28.8 million conversations through nearly 25,000 fraudulent accounts to '...
Cumulative GDPR fines have crossed €7.1 billion, regulators are processing 443 breach reports a day, and H1 2026 alone has already produced more than ...
In June 2026, attackers used social engineering to break into third-party-hosted business applications at iRhythm Holdings, maker of the Zio cardiac p...
ShinyHunters breached Instructure's Canvas learning platform, exposing data tied to hundreds of millions of users across roughly 8,800 institutions an...
LabCorp agreed to a $35 million settlement over the American Medical Collection Agency breach that exposed data on more than 10 million of its patient...
When the U.S. forced Anthropic to disable Fable 5 and Mythos 5 worldwide, paying enterprise customers lost the model with effectively no notice. Stand...
Anthropic released its most capable models, Fable 5 and Mythos 5, on June 9. Seventy-two hours later, a letter from Commerce Secretary Howard Lutnick ...
HHS OCR settled with MMG Fusion, LLC for $10,000 following a breach that exposed the protected health information of 15 million patients — one of the ...
Two high-profile security incidents broke within hours of each other on April 19–20, 2026. Both involved AI platforms. Both exposed real customer data...
In the span of a single week, five separate class action lawsuits landed in federal courts against Mercor.io Corporation. The complaints vary in scope...
Amazon's Ring cancelled its integration with Flock Safety after public backlash — a case study in vendor risk management, third-party surveillance exp...
A YC-backed compliance startup is accused of mass-producing fraudulent SOC 2, ISO 27001, HIPAA, and GDPR reports for hundreds of clients — and has now...