News
Page 5 of 29 — 853 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the full technical report with remediation plan and compliance evidence for $99.
NOTUS reports a February 2025 email scammer posing as DNC Chair Ken Martin stole $28,860.92; only $7,000 recovered via Wells Fargo. Domain audits (ideal 100%): fec.gov 85%, gop.com 77%, democrats.org 68%; dems.org just 32% — none at 100%.
Read Update
MNIT says a coordinated OT cyberattack hit more than 30 Minnesota community water systems July 26–27. Braham briefly took its plant offline; Plymouth, Maple Plain, and South St. Paul went to manual ops. Domain audits (ideal 100%): none reached 100% — health.state.mn.us 38%, peopleservice.com 46%.
Read Update
UC San Diego found every KARR Security System since 2017 shares one plaintext Bluetooth auth key. ~2.2M U.S. cars — many via SoCal Honda/Toyota/Mazda/Ford/Jeep dealers — can be unlocked nearby and tracked via WiGLE. Domain audits (ideal 100%): acrisure.com 78%, karrsecurity.com 53%; none reach 100%.
Read Update
7zip.com impersonates 7-zip.org and ships a trojanized installer that enrolls PCs as residential proxy nodes. Of 16 registered lookalikes we scanned, several (7zip.org, 7-zip.com, 7-zip.net) are brand-owned mirrors/forwards — the lure still scores 29% vs 36% for the project; none at the 100% ideal.
Read Update
Sam Curry and Shubham Shah showed Subaru’s STARLINK admin portal allowed account takeover and remote unlock/start plus a year of ~5 m location history. UH West Oahu summarizes the patch-in-24-hours case. Domain audits (ideal 100%): subaru.com 59%, mysubaru.com 28%; none at 100%.
Read Update
California's data breach list added 3 notices on July 27, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Multi-source breach data week of July 26, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +10 (342 → 352). 13 companies/entities from source roundups.
Read Update
ReliaQuest: hotel Wi-Fi DNS poisoning steals Microsoft 365 logins since June 2026. Full-tunnel VPN guide covers Proton VPN, Cloudflare WARP/Zero Trust, Tailscale, Zscaler, and corporate options. Top 10 U.S. hotel audits (100% ideal): marriott.com 70% leads; choicehotels.com 43%.
Read Update
August 2026 Texas bar associations cyber briefing: peer incidents, domain-audit takeaways (ideal 100%), MFA notes, one IT security tip, and free member self-check links. Published on the last Sunday of the prior month.
Read Update
August 2026 Texas chambers cyber briefing: peer incidents, domain-audit takeaways (ideal 100%), MFA notes, one IT security tip, and free member self-check links. Published on the last Sunday of the prior month.
Read Update
August 2026 Texas credit unions cyber briefing: peer incidents, domain-audit takeaways (ideal 100%), MFA notes, one IT security tip, and free member self-check links. Published on the last Sunday of the prior month.
Read Update
Ernst & Young notified clients after attackers accessed a third-party ITSM help-desk platform Mar 28–Apr 12, 2026 and downloaded tax documents. Texas AG filing July 17 lists 873 Texans. Audits (100% ideal): ey.com 84% — still −16 from ideal.
Read Update
Frontier faces two Colorado class actions after a May 12–June 3, 2026 breach affecting 11,482 people (Texas AG). Scattered Lapsus$ Hunters claimed a ransom. Audits (100% ideal): flyfrontier.com 74% with 15% transport.
Read Update
Surfside Beach lost $545,598.30 via ACH on March 13, 2026 after both lookalike domains registered March 9. As of Jul 25, neither the town nor Wildcat has neutralized the squats — both still have live MX. Audits: vendor squat 47%, town squat 43% — none at the 100% ideal.
Read Update
Pasadena, TX contractor TPIS Industrial Services notified 2,123 Texans after a ransomware incident; PLAY claimed the firm March 26. Texas AG filing July 17. Audits (100% ideal): tpis.com 47% with 0% identity and 15% transport.
Read Update
BBB and FTC warn that fake Evite, Paperless Post, and Punchbowl 'You're Invited' messages steal email passwords and one-time codes. Houston-area coverage is amplifying the alert. Audits (100% ideal): paperlesspost.com 76%, evite.com 75%, ftc.gov 72%, punchbowl.com 52%.
Read Update
Attackers stuffed third-party stolen passwords into Chick-fil-A One from June 17–19, 2026. Notices cite 2,182 Texans. Audits (100% ideal): chick-fil-a.com 42%, chickfila.com 28% — neither near ideal.
Read Update
Jamf documents CrashStealer: a C++ macOS infostealer disguised as CrashReporter that steals Keychain, browsers, ~80 crypto wallets, and 14 password managers via a notarized Werkbit dropper. Audits (100% ideal): cloudflare.com 88%, bitwarden.com 78%.
Read Update
Cybercriminals combine FaceTime social engineering with unpatched iPhones to steal banking credentials and drain accounts. Apple asks users to report fake bank FaceTime calls. Audits (100% ideal): cloudflare.com 88%, malwarebytes.com 72%, apple.com 70%.
Read Update
California's data breach list added 3 notices on July 23, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Texas OAG published 9 new data security breach reports on July 23, 2026, affecting 446,735 Texans. Unlimited Technology Systems, LLC led the batch with 277,364 affected.
Read Update
CVE-2026-63030 and CVE-2026-60137 (wp2shell) enable unauthenticated WordPress RCE. Checks of NASA, TechCrunch, and Rolling Stone show patched Core; White House and NYT hide versions. Audits (100% ideal): cloudflare.com 88%, nytimes.com 76%, nasa.gov 65%.
Read Update
Group-IB documents ClickLock Stealer: a ClickFix macOS campaign that kills apps until you type your login password, then steals Keychain, browsers, crypto wallets, and leaves a GSocket backdoor. Domain audits (ideal 100%): cloudflare.com 88%, malwarebytes.com 72%, apple.com 70%.
Read Update
HHS OCR listed 1 large HIPAA breach submission dated July 21, 2026, affecting 3,803,750 individuals nationally. Unlimited Technology Systems, LLC led the batch with 3,803,750 individuals.
Read Update
Multi-source breach data week of July 19, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +15 (327 → 342). 16 companies/entities from source roundups.
Read Update
Have I Been Pwned added 1 breach on July 19, 2026, exposing 23,272,765 accounts globally. Paidwork led the batch with 23,272,765 accounts.
Read Update
LastPass warned July 13, 2026 of lookalike-domain phishing (lastpassnewsletter.com / lastpasscompliance.com) impersonating DocuSign. A parallel Bitwarden lure uses bitwardennewsletter.com. Neither vault vendor was breached. Audits: bitwarden.com 78%, docusign.com 72%, lastpass.com 66% — all below the 100% ideal, with lastpass.com at 15% transport.
Read Update
EmailMeNow’s SEC EDGAR tracker finds 14 Item 1.05 cybersecurity issuer families YTD through July 19, 2026 (18 filings / 31 cyber-related 8-Ks). Domain audits of filers: Stryker 76% leads; none reach the 100% ideal; most score 15% transport.
Read Update
Independent EmailMeNow audits of seven major password-manager domains find scores from 86% (Dashlane) to 65% (Keeper) — none reach the 100% ideal. Proton.me leads transport at 100%; LastPass sits at 66% with 15% transport amid 2026 phishing waves.
Read Update
Coca-Cola disclosed a July 16, 2026 Fairlife ransomware event that suspended U.S. dairy production while Canada continued. Product safety unaffected; scope still unknown. Audits: fairlife.com 78%, coca-cola.com 69%, coca-colacompany.com 63% — all below the 100% ideal, with 15% transport on each.
Read Update