Explore

FactFableFactFable
How SFTP Quietly Underpins Modern Networks

How SFTP Quietly Underpins Modern Networks

It's the unsung hero of secure data transfer. Discover what SFTP is, how it works, and why this decades-old protocol is still a critical part of modern digital infrastructure.
Rapid ReadRapid Read
Uber Technologies Investigated for Data Breach Exposing Personal Information

Uber Technologies Investigated for Data Breach Exposing Personal Information

Federman & Sherwood is investigating a data breach involving Uber Technologies, Inc., according to a notice filed with the California Attorney General. An unauthorized third party gained access to personal information through Uber’s account with a service provider. The incident began on October 9, 2026, when the service provider notified Uber that its internal credentials had been compromised, leading to unauthorized access to Uber’s account. Uber promptly severed its data connections with the provider and initiated an investigation. By October 13, 2026, Uber confirmed that the unauthorized party had accessed Uber data linked to the service provider, which included personal information of affected individuals. While Uber’s notification letter, dated November 10, 2026, did not specify the exact categories of personal information affected in the publicly available sample, it indicated that potentially compromised data could include names, Social Security numbers, financial information, and other sensitive de...
Rapid ReadRapid Read
Dorsata Healthcare Breach Exposes 58,249 Patients Due to Metabase Zero-Day Vulnerability

Dorsata Healthcare Breach Exposes 58,249 Patients Due to Metabase Zero-Day Vulnerability

Charlottesville-based Dorsata, Inc., a vendor specializing in prenatal and OB-GYN workflow software, has confirmed a data breach impacting 58,249 patients. The breach occurred between August 10 and August 12, 2026, when attackers exploited CVE-2026-72898, a maximum-severity (CVSS 10.0) zero-day vulnerability in self-hosted Metabase analytics software. This unauthenticated SQL injection flaw in Metabase's password-reset endpoint allowed attackers to gain administrative control of the BI server and access connected clinical databases. Exposed data includes patient names, addresses, IDs, dates of birth, clinical vitals, treatment details, provider names, vaccination records, medications, health insurance details, and medical history notes. Dorsata stated that Social Security numbers, driver’s license numbers, and payment card details were not involved, and no evidence of misuse has been found.
TrendlineTrendline
TSMC Confirms Employee Data Breach Linked to Cloud Service Provider

TSMC Confirms Employee Data Breach Linked to Cloud Service Provider

TSMC Confirms Employee Data Breach Linked to Cloud Service Provider
Rapid ReadRapid Read
South Korea's Financial Security Institute Reports Data Breach After Cyberattack

South Korea's Financial Security Institute Reports Data Breach After Cyberattack

South Korea's Financial Security Institute (FSI) has reported a data breach following a cyberattack on its security assessment system. The institute detected unauthorized external access on Monday, November 9, and promptly blocked the compromised system. The breach reportedly exposed approximately 200 administrative documents, around 300 pieces of personal data including names and dates of birth, and about 350 user records. This sensitive information was stored on the FSI website, which is utilized for conducting security assessments of financial institutions. The FSI has since reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). Initial investigations suggest that the attacker attempted to evade access controls by repeatedly changing internet protocol (IP) addresses to make connections appear legitimate. This incident highlights growing concerns regarding the increasing frequency and sophistication of cyberattacks globally, emphasizing the need ...
FactFableFactFable
How Drew Houston Outlasted Three Competitive Threats Most Founders Don't Survive

How Drew Houston Outlasted Three Competitive Threats Most Founders Don't Survive

Explore the strategic masterstrokes that allowed Dropbox's Drew Houston to fend off existential threats from Apple, Google, and Microsoft.
TrendlineTrendline
Atlassian Guard Premium Enhances Data Loss Prevention for Jira and Confluence Cloud

Atlassian Guard Premium Enhances Data Loss Prevention for Jira and Confluence Cloud

Atlassian Guard Premium Enhances Data Loss Prevention for Jira and Confluence Cloud
FactFableFactFable
Before Uploading Tax or Medical Documents to Claude, Ask These Questions

Before Uploading Tax or Medical Documents to Claude, Ask These Questions

Thinking of using an AI like Claude for sensitive tax or medical files? Here are the critical privacy and security questions you need to ask first.
TrendlineTrendline
Law Firms Face Significant Cyber Extortion Threats Despite High Security Spending

Law Firms Face Significant Cyber Extortion Threats Despite High Security Spending

Law Firms Face Significant Cyber Extortion Threats Despite High Security Spending
Rapid ReadRapid Read
BOCA Reports Leak of Passport Photos and Authorization Letters Following Cyberattack

BOCA Reports Leak of Passport Photos and Authorization Letters Following Cyberattack

The Bureau of Consular Affairs (BOCA) has disclosed a data breach affecting several of its websites, resulting in the leak of over 72,000 passport photographs and 26,000 scanned authorization letters. The incident, detected last week, involved suspected hacking attempts on BOCA's online systems. The compromised data includes passport photo files uploaded between September 3 and last Monday through individual online appointments, group applications by travel agencies, and conditional online passport renewal applications. Additionally, 26,072 scanned authorization letters verified by the Taipei Economic and Cultural Office in New York between October 26, 2011, and last Friday were leaked. A third group of 774 applications for APEC Business Travel Cards, submitted between September 1 and November 9 this year, also had information compromised, including photographs, application numbers, gender, birthplaces, job titles, and recommending agencies. BOCA has stated that the leaked data does not include key identif...
TrendlineTrendline
DraftKings Data Breach Claim Reported, Exposing Customer and Staff Credentials

DraftKings Data Breach Claim Reported, Exposing Customer and Staff Credentials

DraftKings Data Breach Claim Reported, Exposing Customer and Staff Credentials
TrendlineTrendline
Small Businesses Face Data Security Risks from AI Tool Usage, Require Immediate Response Protocols

Small Businesses Face Data Security Risks from AI Tool Usage, Require Immediate Response Protocols

Small Businesses Face Data Security Risks from AI Tool Usage, Require Immediate Response Protocols