News
Current events, industry audit reports, compliance watch updates, and technology alerts. By industry · National audits · Breach trackers · State collections: Texas · Florida · California · Illinois · New York · Pennsylvania — showing latest 30 of 698
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the full technical report with remediation plan and compliance evidence for $99.
Researcher tokay0 disclosed an unpatched SharkNinja AWS IoT Core certificate-scoping flaw (Jul 13, 2026) enabling cross-device RCE, cameras, maps, and plaintext Wi-Fi keys. ~1.52M devices seen in one region; ~44% respond to command probes. Audits: irobot.com 68%, ecovacs.com 62%, roborock.com 61%, sharkninja.com 54%, sharkclean.com 46% — none at the 100% ideal.
Read Update
Zoom ZSB-26014 / CVE-2026-53412 (CVSS 9.8) can let an unauthenticated attacker take over Zoom accounts on Windows via the network. Update Workplace to 7.0.0+ and patched VDI builds. Audits: bleepingcomputer.com 63%, zoom.us/zoom.com 58% — none at the 100% ideal.
Read Update
Forbes Tech Council and Resiliently warn that MFA/EDR warranties and outside-in scans now drive cyber coverage — while ~1 in 4 claims face denial patterns. Audits: forbes.com 66%, travelers.com 58%, resiliently.ai 32% — none at the 100% ideal.
Read Update
Have I Been Pwned indexed ~6.6M Goose Creek Candle emails after June 2026 customer outreach alleged a Shopify-related leak. Names, phones, addresses, order IDs, and spend exposed — phishing risk remains. Audits: goosecreekcandle.com 53%, goosecreek.com 51% — none at the 100% ideal.
Read Update
Texas AG Ken Paxton joined a 42-state $150M bankruptcy settlement with 23andMe over the 2023 breach that exposed genetic data of 6.9M people. Immediate recovery $18M; Texas $1.27M. Audits: 23andme.com 52%, michigan.gov 42%, texasattorneygeneral.gov 37% — none at the 100% ideal.
Read Update
Malwarebytes warned that Meta’s Muse Image (July 7, 2026) let strangers generate AI images from public Instagram handles with no notice. Meta reversed the feature July 11. Audits score meta.com 39%, facebook.com 63%, Instagram 81% — none at the 100% ideal.
Read Update
Under Armour is investigating reports that emails tied to ~72.7M accounts were posted online after an alleged Everest ransomware incident. No passwords or payments reported exposed — phishing risk remains. Audits: underarmour.com 52%, ua.com 54% — none at the 100% ideal.
Read Update
Nelson University (Waxahachie; formerly SAGU) reported 21,905 Texans on the Texas OAG list June 18, 2026 after a March–April 2025 intrusion claimed by Qilin. Audits score nelson.edu at 44% — well below the 100% ideal.
Read Update
Southern Methodist University appears on the Texas OAG breach list dated October 17, 2025 covering 266 Texans with SSNs and dates of birth exposed. Audits score smu.edu at 44% — well below the 100% ideal.
Read Update
Side-by-side audits of UT System, Texas A&M System, and leading private Texas universities. St. Thomas leads privates at 69%; Rice and SMU sit at 44%. None reach the 100% ideal domain security score.
Read Update
TTUHSC’s Texas OAG filing lists 738,506 Texans after a September 2024 cybersecurity event tied to Interlock ransomware claims. Audits score ttuhsc.edu at 44% and ttu.edu at 34% — far below the 100% ideal.
Read Update
Independent audits of 10 major Texas universities show overall scores from 76% down to 34% — none reach the 100% ideal. Transport security averages just 23%, leaving campuses exposed to spoofed financial-aid and payroll phishing.
Read Update
Audits of 7 major Texas community college systems show overall scores from 82% down to 44%. San Jacinto leads; Austin Community College ties the bottom at 44% — none reach the 100% ideal for domain security.
Read Update
University of Dallas reported 7,313 Texans on the Texas OAG list May 29, 2026 after August 2025 unauthorized access. Audits score udallas.edu at 56% overall with only 20% Identity — far below the 100% ideal.
Read Update
University of St. Thomas–Houston reported a Texas OAG breach on May 28, 2026 affecting 24,158 Texans after July–August 2025 unauthorized access. Audits score stthom.edu at 69% — above peers, still below the 100% ideal.
Read Update
Apple's iOS 26.3 emergency update (Feb 11, 2026) patched about 39 security issues, including actively exploited dyld zero-day CVE-2026-20700. Audits score apple.com 70%, icloud.com 68%, and support.apple.com 52% vs a 100% domain-security ideal.
Read Update
TMHP Release 3 moves Custom Reports, MCP, Document Uploads, and more into IAMOnline with required MFA on August 3, 2026. Audits score tmhp.com at 74% and hhs.texas.gov at 58% vs a 100% domain-security ideal — activation emails are a prime phishing window.
Read Update
Genesis ransomware claimed East Texas Family Medicine (etfmed.com) around July 3–5, 2026 and threatened to leak internal medical files. Independent audit scores etfmed.com at 48% Critical Risk vs a 100% ideal.
Read Update
Have I Been Pwned added 1 breach on July 11, 2026, exposing 793,925 accounts globally. Glendale Community College led the batch with 793,925 accounts.
Read Update
Lufkin CPA firm Todd, Hamaker & Johnson (cpaonpoint.com) confirmed an Akira ransomware attack after a late-June 2026 leak-site listing. Independent audit scores cpaonpoint.com at 54% Critical Risk vs a 100% ideal.
Read Update
Texas OAG published 3 new data security breach reports on July 10, 2026, affecting 36,031 Texans. First National Holdings, LLC led the batch with 34,507 affected.
Read Update
Apple's June 29, 2026 security updates for iOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2 fix 37 unique CVEs — mostly WebKit flaws public for weeks. Audits score apple.com at 70% and webkit.org at 70%, with 15% transport on both.
Read Update
Google's Chrome 150 stable update fixes 382 security flaws — 15 critical, 67 high — across Extensions, GPU, WebUSB, and Browser components. Audits score google.com at 52% and chrome.google.com at 31%, both below the 100% domain security ideal.
Read Update
The Seventh Circuit affirmed Hartford's denial of a nearly $4 million loss after hackers spear-phished an Illinois insurance receiver's CFO and impersonated executives internally. Audits score osdchi.com at 78% and thehartford.com at 60% — both below the 100% domain security ideal.
Read Update
Advantive LLC reported a Texas OAG breach on July 3, 2026 affecting 700 Texans. Names and financial account data were exposed. Independent audits score advantive.com at 44% with 25% Identity & Spoofing.
Read Update
CNO Services LLC reported a Texas OAG breach on July 3, 2026 affecting 530 Texans after a May 2026 vishing attack on employees. SSNs and dates of birth were exposed. Audits score cnoinc.com at 42% with 20% Identity & Spoofing.
Read Update
JCPenney appears on Have I Been Pwned with 368,418 accounts after a June 2026 ShinyHunters pay-or-leak campaign tied to Oracle PeopleSoft HR data. Audits score jcpenney.com at 58% with 15% transport security.
Read Update
Lake Region Healthcare Corporation reported a Texas OAG breach on July 3, 2026 affecting 294 Texans. SSNs and medical records were exposed after May 2025 unauthorized network access. lrhc.org audits at 78% with 15% transport security.
Read Update
Moody Bible Institute appears on Have I Been Pwned with 2.3M accounts after a June 2026 ShinyHunters pay-or-leak campaign. Donor and alumni PII was published. Audits score moody.edu at 64% with 15% transport security.
Read Update
Q2 Artificial Lift Services reported a Texas OAG breach on July 3, 2026 affecting 630 Texans after Payload ransomware claimed 80GB stolen. Audits score q2als.com at 74% identity but 15% transport security.
Read Update