[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentData Breaches
Boston Scientific Disrupts Global Operations After Cyber Incident
Boston Scientific's global operations have been significantly disrupted due to a cyber incident, affecting access to key systems and applications, including order processing and shipping. The incident has caused a major network outage, impacting the company's ability to operate normally worldwide.
Boston Scientific Cyberattack Disrupts Global Operations
A delayed shipment of a life-saving cardiac device can have devastating consequences, like a cancelled surgery - and that's exactly what's at risk when a cyberattack hits a medical device manufacturer like Boston Scientific. The recent attack has disrupted the company's global operations, causing order-processing delays that can have a ripple effect on patients' lives.
Boston Scientific Hit by Global Cyberattack Disruption
Boston Scientific is facing significant disruptions to its operations after a global cyberattack hit its IT systems, limiting access to crucial business applications and hindering its ability to process and ship customer orders. The company is working closely with third-party experts to investigate and restore its systems, but a timeline for full recovery remains uncertain.
US Water Systems Targeted in Surge of Cyberattacks
In a shocking revelation, over 100 internet-exposed US water systems were hit with cyberattacks in just one month, highlighting a systemic risk that demands immediate attention. This alarming surge in targeted attacks has raised serious concerns about the security of America's water sector.
Carhartt Breach Reveals 12.9M Affected, Exposes ShinyHunters' Data Padding Tactics
The Carhartt data breach just got a reality check: an analysis by Troy Hunt revealed that around 12.9 million accounts were genuinely affected, not nearly as many as initially claimed by the hackers. Turns out, you can't always take cybercriminals at their word!
Boston Scientific Hit by Cyberattack Disrupting Global Operations
Boston Scientific's global operations have been disrupted by a cyberattack, causing significant hiccups in processing and shipping customer orders due to limited access to key information systems and business applications. The incident was detected on August 25, prompting an immediate response to mitigate the impact.
Rockstar Games Leak Exposes Insider Threat Risks
The leak of Grand Theft Auto VI footage by CyberLeek has highlighted the devastating risks of insider threats, where stolen IP can destroy the hard work and livelihoods of employees and companies. This breach has exposed a gaping hole between traditional copyright enforcement and the evolving tactics of threat actors.
LACMA Breach Exposes Sensitive Data of Customers, Employees
A data breach at LACMA exposed sensitive information of customers and employees, with suspicious activity first detected on July 11, 2025, and a confirmed network compromise a month later. The museum's investigation, which concluded in 2026, revealed a lengthy vulnerability that put personal data at risk.
Nutex Health Probes Data Breach After Servers Exfiltrated
Nutex Health is investigating a data breach that may have compromised private and confidential information stored on its servers, which were accessed and exfiltrated by an unauthorized third party. The incident has prompted a thorough probe and disclosure to the U.S. Securities and Exchange Commission.
Apollo Breach Exposes Sensitive Data Via Social Engineering
A recent data breach at Apollo Global Management exposed sensitive personal info, including Social Security numbers, when an unauthorized user gained cloud access for just four days, from July 6 to July 10, 2026. The breach was triggered by a social engineering attack, highlighting the importance of robust security measures.
Encryption Key Exposed in South Korean Startup Platform Breach
A data breach at South Korea's Modu-ui Changup startup platform exposed sensitive info from around 5,000 applicants, including email addresses, comments, and startup ideas. The leak happened when an encryption key was collected by external crawlers, compromising personal data stored on the government-backed site.
Thousands of Leaked AWS Keys Remain Active
A recent scan by Truffle Security uncovered a staggering 9,300+ active AWS keys that were leaked online, including hundreds with full administrative rights, putting sensitive data at risk. These compromised keys were found across various public platforms, with a shocking 88% still authentic and vulnerable to exploitation.
Apollo Hit by Data Breach in Financial Sector Cyberattack Wave
Apollo Global Management recently fell victim to a data breach, with hackers gaining unauthorized access to its cloud platforms between July 6 and July 10, and sensitive personal data being compromised, discovered on August 12. The company swiftly responded to the incident, notifying law enforcement and bolstering its security protocols.
Mega-Breaches Surge, Setting 2026 on Record Pace
The alarming surge in mega-breaches is setting 2026 on a record-breaking pace, with July alone witnessing six shocking incidents that exposed sensitive information and left consumers vulnerable. A recent breach of a Department of Homeland Security information-sharing platform is a stark reminder that even supposedly secure systems can be compromised.
Exposed AWS Keys Grant Attackers Full Corporate Account Control
Thousands of exposed AWS keys are still active, putting entire corporate accounts at risk of being hijacked by attackers - and a staggering 88% of re-verified keys were found to still grant access as recently as August 2026. This alarming vulnerability highlights the urgent need for tighter security measures to protect sensitive cloud data.
SickKids Breach Exposes Employee and Applicant Data
A recent cybersecurity incident at Toronto's Hospital for Sick Children (SickKids) may have exposed sensitive personal data of current and former employees, job applicants, and staff from affiliated organizations. The breach, linked to a flaw in third-party software, is under investigation with the help of external cybersecurity experts.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Facial Recognition Platform Exposes 9M Images
A staggering 9 million images, including facial photos of adults, teens, and kids, were left vulnerable in a publicly exposed database, revealing a massive security lapse by a facial recognition platform. The unprotected database contained 450 gigabytes of sensitive data, sparking serious concerns about identity verification and data security.
French Tax Authority Breach Exposes 600K Records
A data breach at the French General Directorate of Public Finances exposed a massive 600,000 records, including sensitive taxpayer and business information such as tax IDs, addresses, and phone numbers. For around 250 individuals, the breach went even deeper, compromising the actual contents of messages exchanged with the authority.
Sakura Internet Breach Exposes 1.36 Million Accounts
A massive data breach at Sakura Internet has put 1.36 million member accounts at risk, after hackers gained access to the company's sales management system, compromising sensitive contract and membership information. The breach was discovered on August 9, when investigating a separate incident involving unauthorized logins on 583 accounts.
CareCloud Breach Exposes 3.7 Million Patient Records
A massive data breach at CareCloud has put 3.7 million patient records at risk, with the company's platform compromised for nearly eight hours. The alarming incident has raised serious concerns about healthcare data security.
Azure Exfiltration Campaign Exposes 3.6 Million Records
A shocking data breach has hit major players like McDonald's and Gap Inc., with a hacker claiming to have made off with a staggering 3.6 million Azure account records, including 1.7 million sensitive employee records from McDonald's alone. The breach exposes names, emails, addresses, and more, serving as a stark reminder that traditional security perimeters just aren't enough.
Quest Breach Exposes Guests' Personal Data Through Third-Party Vulnerability
We've got some important news to share with you: Quest recently discovered a security issue with one of its third-party service providers that may have exposed some of your personal data. The company quickly sprang into action to contain the breach and is now reaching out to affected guests.
Salesforce, ServiceNow Portals Targeted in Ongoing Data Scraping Campaign
A single virtual private server has been secretly siphoning off sensitive records from Salesforce and ServiceNow customer portals since March 2025, according to recent research by Reco. This ongoing data scraping campaign, dubbed City Forum, has been quietly pulling data from multiple targets across various sectors.
Cyber Incident Disrupts UT San Antonio's Student Services
The University of Texas at San Antonio swiftly contained a potential cyber threat after detecting suspicious activity on the edge of its network, and took swift action to protect its systems and data. Thankfully, the incident appears to have been effectively managed, with no evidence of data compromise reported so far.