A settlement has resolved one of the largest healthcare data breach lawsuits still working through the U.S. court system. The HIPAA Journal reported on September 3, 2026 that Managed Care of North America, Inc. (MCNA) has agreed to a multi-million-dollar settlement fund closing out class action litigation tied to a 2023 ransomware attack that hit…
A synced passkey stored in Chrome and backed up to Google Password Manager felt like the end of the password problem. Then, on August 3, 2026, Palo Alto Networks’ Unit 42 team published a technical breakdown of an attack family it calls Pass-ta-key, and the picture changed. In its strongest form, the attack pulls a…
Palworld hit its full 1.0 release on July 10, 2026, and the itch to run a private server for a small friend group hasn’t faded. The problem most players hit isn’t the game, it’s the network. Home routers block inbound traffic by default, ISPs hand out CGNAT addresses that make port forwarding impossible, and opening…
A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, using the site as a shared board to pool answers to a timed web task and pass around a way out of…
Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe. The Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 – an authentication bypass and remote code execution chain – to conduct command execution and reconnaissance, as…
Sony rarely launches a new hardware category. The PlayStation 5 has shipped headsets, earbuds, and a pro controller, but never a standalone speaker built to sit on a desk. That changed on September 1, 2026, when pre-orders opened for the PlayStation Pulse Elevate, a $219.99 pair of wireless desktop speakers aimed squarely at PC and…
A dark-web marketplace called Nexus spent late August advertising something cybercrime forums rarely traffic in at this scale: not passwords, not credit card numbers, but forensic-grade scans of the physical identity documents that get you a hotel room, a rental car, or a legal cannabis purchase. By the time Brian Krebs of KrebsOnSecurity finished tracing…
A single directory traversal bug in VMware vCenter Server has turned into one of the broadest hypervisor-level ransomware campaigns of 2026. Security researchers tracking exploitation of CVE-2026-59310, a CVSS 9.8 flaw in vCenter’s Syslog server, say a suspected China-nexus actor has already compromised 361 victim IP addresses spread across 47 countries, using the access to…