Call +1 (979) 472-3693

News

Cybersecurity News & Audit Summaries

Page 2 of 27 — 790 updates. Back to latest · By industry · National audits

Instant audit

Run a free scan at audit.emailmenow.com, then unlock the full technical report with remediation plan and compliance evidence for $99.

Run free audit
Illustration of a cracked digital vault with phishing and deepfake risk signals for the IBM Cost of a Data Breach Report 2026
Cybersecurity Alert
August 4, 2026 by EmailMeNow IT Consulting

IBM Cost of a Data Breach 2026: Phishing Still #1 as AI Deepfakes and MFA Fatigue Raise the Bill

IBM/Ponemon Cost of a Data Breach Report 2026: global average $4.99M (+12%), US $11.5M; phishing still the top vector; AI-driven attacks +56% with deepfakes leading. Domain audits (ideal 100%): hhs.gov 71%; ibm.com 70%; frostbank.com 68% — none at 100%.

NewsData BreachPhishingMFAArtificial IntelligenceRansomwareCyber InsuranceCybersecurity
Read Update
Mobilelink Cricket Wireless retailer data breach and Texas federal lawsuits
Cybersecurity Alert
August 4, 2026 by EmailMeNow IT Consulting

Was Mobilelink Breached? Cricket Retailer Faces S.D. Tex Consolidation

Master Mobilelink / Mobily (Mobilelink) reported 12,201 Texans affected after a late-2025 incident. Consolidated S.D. Tex suits under 4:26-cv-02565; audits score mobilelinkusa.com at 84% with 15% transport.

NewsData BreachTexasRetailTelecomClass ActionCybersecurity
Read Update
Multi-source breach data week of August 2, 2026
Cybersecurity Alert
August 2, 2026 by EmailMeNow IT Consulting

Breach Data Week of August 2, 2026: Texas, HIBP, SEC & HHS Updates

Multi-source breach data week of August 2, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +18 (352 → 370). 11 companies/entities from source roundups.

CybersecurityData BreachTexasHave I Been PwnedHHS OCRSECForm 8-K
Read Update
Unverified ransomware leak-site dashboard naming many victims at once
Cybersecurity Alert
August 2, 2026 by EmailMeNow IT Consulting

ExfilSquad Named 14 Victims in One Day — Claims Unverified; We Audited the Domains

ExfilSquad posted ~14 high-profile victims on July 26, 2026 — including Microsoft (~8M), Zenith Bank (~90M), and City of Houston (~6M). Researchers call evidence thin. Domain audits (ideal 100%): none at 100%; flyfrontier.com 74%; dcps.dc.gov 30%.

NewsRansomwareData BreachExfilSquadTexasLocal GovernmentMFACybersecurity
Read Update
Inbox view of a Google security email with blank space hiding a fake recovery-contact review link
Cybersecurity Alert
August 2, 2026 by EmailMeNow IT Consulting

Gmail Recovery-Contact Injection: Real Google Email, Fake 'Review' Link

Attackers abuse Google recovery-contact requests so phishing arrives from Google’s own servers (SPF/DKIM/DMARC pass). Do not click — verify at myaccount.google.com. Prefer passkeys, YubiKey, and Google Authenticator over SMS. Audits (100% ideal): accounts.google.com 58%, google.com 52%.

NewsPhishingGmailGoogle AccountMFAPasskeysYubiKeyAuthenticator AppsCybersecurity
Read Update
Houston City College campus under digital storm after ShinyHunters student data leak
Cybersecurity Alert
August 2, 2026 by EmailMeNow IT Consulting

Was Houston City College Breached? We Scanned Their Domain Security

Houston City College appears on Have I Been Pwned with ~832k student and alumni accounts after a June 2026 ShinyHunters pay-or-leak campaign. Audits score hccs.edu at 68% with 15% transport; MFA FAQ allows only Microsoft Authenticator or SMS — not Google Authenticator or YubiKey.

NewsData BreachShinyHuntersEducationTexasCommunity CollegesMFACybersecurity
Read Update
Chamber of commerce office facade under abstract cyber breach alert signals
Cybersecurity Alert
August 1, 2026 by EmailMeNow IT Consulting

Chambers of Commerce Hit by Hacking — Ransomware and Fake CAPTCHA

AiLock claimed Dallas Regional Chamber; DragonForce listed Tulsa; Cuero warned of fake-CAPTCHA malware. Domain audits (ideal 100%): houston.org 70%; dallaschamber.org and tulsachamber.com 50%; okcchamber.com 32% — none at 100%. No portal advertises YubiKey or Google Authenticator.

NewsChambers of CommerceRansomwareMalwareMFAYubiKeyAuthenticator AppsBECCybersquatTexasOklahomaCybersecurity
Read Update
Hardware security key and authenticator app beside an empty MFA directory scoreboard with Strong and Pass grades
Cybersecurity Alert
August 1, 2026 by EmailMeNow IT Consulting

MFA Support Directory: YubiKey, Authenticator Apps & Passkeys

Living MFA directory: YubiKey/FIDO, open TOTP, and passkeys — Banks, Credit Unions, Investment Firms, Travel, Healthcare, Social, and Consumer Finance. Domain audits ideal 100%.

NewsMFAYubiKeyAuthenticator AppsPasskeysDirectorySIM SwapCybersecurity
Read Update
SMS bank code on a phone marked weak beside a hardware security key and authenticator app
Cybersecurity Alert
August 1, 2026 by EmailMeNow IT Consulting

National Banks Still Fail MFA — SMS Dominates Over YubiKey and Authenticator Apps

Public MFA docs for Chase, Bank of America, Wells Fargo, U.S. Bank, Capital One, and Citi show phone SMS codes still dominate. None advertise Google Authenticator / Proton Pass TOTP; Bank of America is the clear FIDO security-key standout. Domain audits (ideal 100%): chase.com 79%; citi.com 50% — none at 100%.

NewsBanksMFAYubiKeyAuthenticator AppsSIM SwapFinancial ServicesCybersecurity
Read Update
Texas map with MFA strength markers for regional banks
Cybersecurity Alert
August 1, 2026 by EmailMeNow IT Consulting

Texas Banks Still Fail MFA — SMS Secure Access Codes Dominate Over YubiKey and Authenticator Apps

Public MFA docs for Frost, Comerica, Southside, Broadway, TRB, Prosperity, Texas Capital, and Independent Financial show SMS / voice codes still dominate. None advertise Google Authenticator / Proton Pass TOTP or consumer YubiKey. Domain audits (ideal 100%): texascapitalbank.com 84%; comerica.com 37% — none at 100%.

NewsBanksMFAYubiKeyAuthenticator AppsSIM SwapTexasFinancial ServicesCybersecurity
Read Update
Political finance desk with a suspicious urgent payment email and bank transfer confirmation
Cybersecurity Alert
July 30, 2026 by EmailMeNow IT Consulting

DNC Lost Nearly $29,000 to Email Scammer Posing as Chair Ken Martin

NOTUS reports a February 2025 email scammer posing as DNC Chair Ken Martin stole $28,860.92; only $7,000 recovered via Wells Fargo. Domain audits (ideal 100%): fec.gov 85%, gop.com 77%, democrats.org 68%; dems.org just 32% — none at 100%.

NewsBusiness Email CompromisePolitical CommitteesCEO FraudWire FraudFECCybersecurity
Read Update
Minnesota community water treatment plant with industrial control screens showing offline OT alerts
Cybersecurity Alert
July 30, 2026 by EmailMeNow IT Consulting

Coordinated Cyberattack Hit 30+ Minnesota Water Systems — OT Controls Offline

MNIT says a coordinated OT cyberattack hit more than 30 Minnesota community water systems July 26–27. Braham briefly took its plant offline; Plymouth, Maple Plain, and South St. Paul went to manual ops. Domain audits (ideal 100%): none reached 100% — health.state.mn.us 38%, peopleservice.com 46%.

NewsCritical InfrastructureWater UtilitiesOTSCADAMunicipalMinnesotaCISACybersecurity
Read Update
Dealership lot car with aftermarket alarm sticker and shared Bluetooth unlock risk highlighted
Cybersecurity Alert
July 29, 2026 by EmailMeNow IT Consulting

Dealer-Installed KARR Alarms Left Millions of Cars Unlockable Over Shared Bluetooth Keys

UC San Diego found every KARR Security System since 2017 shares one plaintext Bluetooth auth key. ~2.2M U.S. cars — many via SoCal Honda/Toyota/Mazda/Ford/Jeep dealers — can be unlocked nearby and tracked via WiGLE. Domain audits (ideal 100%): acrisure.com 78%, karrsecurity.com 53%; none reach 100%.

NewsAuto DealersConnected CarsBluetoothAutomotiveFTC SafeguardsCybersecurity
Read Update