The day's cybersecurity headlines from public sources, in one place. Search them, filter by theme or CVE, or show only vulnerabilities CISA has confirmed are being exploited. Every headline links to the original.
For my own read on what the news means for your business, see Insights.
15 stories match. Clear filters
-
Amplifon Americas Data Breach Impacts 1.3 Million
Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.
-
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country. Describing the threat as active and…
-
Cyber insurance softens on price but tightens on AI exposure
Marsh reports global cyber rates fell 4% in Q3 2026, the 13th straight quarterly decline, and US rates were flat. Some insurers are tightening underwriting on AI risk, and one in five insurance respondents in a Gallagher survey saw an AI-related loss or claim in the past year. AI endorsements are…
-
Covenant Health (Maine) settles 2025 breach class action for $2 million
Attackers accessed Covenant Health's network in May 2025, found in July 2025. More than 500,000 patients affected, at least 284,000 in Maine. Data included SSNs, treatment details and insurance information. Class members can claim up to $5,000 for documented losses or about $75 cash, plus two…
-
Insurance industry fears potential impacts from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models.
-
Cyber Insurance's New Reality: Underwriting Isn't Enough
Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
-
Healthcare breaches: Any-Time Home Care (30,017 people), Photon Health, Healthcare Highways
Any-Time Home Care ransomware exposed prescriptions, diagnoses, SSNs, and insurance data for 30,017 people. Photon Health reported unauthorized access through a zero-day in its Metabase application. Healthcare Highways confirmed intrusion and data theft. Direwolf and Chaos claimed two of the…
-
iRhythm breach affects at least 360,000 patients
Attackers took data from third-party-hosted business applications June 3 to 8. Stolen: names, contact details, dates of birth, plus account, device serial, insurance numbers and service dates. Extortion demand came June 9. State filings show 360,000+ (298,647 in Texas, 69,526 in South Carolina)…
-
Cyber insurance: AI reshaping exposure as rates keep falling (lead only, not fully verified)
This piece is dated within the window and is the most current cyber insurance headline found, but the source blocks automated retrieval (robots.txt), so the specifics below are not confirmed beyond the headline. Broader context from adjacent late-August/early-September reporting (Swiss Re) has…
-
Coalition launches Active Cyber Insurance for Enterprises, up to £20M in UK limits
Coalition expanded its Allianz Commercial partnership to offer up to £20 million in cyber limits to large UK enterprises, following a US launch of the same enterprise product in July. The pitch centers on real-time telemetry from Coalition's honeypot network feeding underwriting decisions…
-
Cyber insurance coverage gaps: reading between the lines of the policy
Analysis published July 16 details how cyber policies increasingly deny or reduce payouts when insureds misrepresent controls at underwriting or cannot prove required controls were in place at incident time. Reported denial rates now run 40 percent or higher on some 2024 to 2025 claims. Carriers…
-
Cyber insurance market holds steady on price, but SME coverage gap keeps widening
Two GlobalData/Insurance Journal pieces landed the same day: the US cyber insurance market saw its eighth straight quarter of pricing cuts in Q1 2026, with the 2025 loss ratio climbing to 53, its highest since the pandemic ransomware spike, driven by rising third-party claims. Separately…
-
Aflac Japan discloses breach of 4.38 million policyholders, including bank account numbers
Aflac Life Insurance Japan disclosed a breach affecting roughly 4.38 million policyholders. The company discovered unauthorized access on June 25 and determined attackers were inside systems from June 15 to June 25. Around 230,000 records included bank account numbers used for premium payments…
-
"Mistic" fileless backdoor tied to access broker KongTuke/Woodgnat, insurance and education among targets
Symantec detailed Mistic, a stealthy memory-only backdoor used in financially motivated intrusions since April 2026 against insurance, education, IT, and professional-services orgs. It runs C2 payloads directly in memory, avoids writing to disk, then self-deletes after the mission, defeating…
-
MagMutual, a medical malpractice insurer, listed as breached by threat actor "LeakNet"
MagMutual Insurance Company, an Atlanta-based medical professional liability insurer serving physicians and healthcare organizations nationwide, was listed by threat actor LeakNet. As an insurer, MagMutual is subject to state insurance data-security laws requiring a written information security…