The Healthcare Benefits Breach You Haven't Heard About (or the One After It, or the One After That)

Three healthcare and benefits data breaches disclosed in the same week -- TriZetto (3.4M), Navia (2.7M), and Marquis (672K) -- follow the same disturbing pattern: your most sensitive data lives with vendors you've never heard of, and you find out months later.

Read More

You Can't Seize the Internet: Iran's Handala Hackers Were Back Online Hours After the FBI Acted

The DOJ seized four Handala domains. Iran's MOIS-backed hackers had new infrastructure up within hours, called the action 'trivial,' and kept operating. That tells you everything about the limits of domain seizures as deterrence.

Read More

DOGE Used ChatGPT to Kill $100 Million in Research Grants. Court Filings Describe the Process.

Court depositions describe DOGE staffers using ChatGPT to flag humanities grants as DEI and terminate them -- no domain experts, no review, just a chatbot and a spreadsheet deciding $100 million in funding.

Read More

He Hacked Companies, Then Billed Them $75 Million to Recover From His Own Attacks

Angelo Martino allegedly orchestrated ransomware attacks and then helped victims pay ransoms through DigitalMint -- the firm where he worked. Federal charges now implicate the co-founder too.

Read More

Coinbase Is Asking You to Type Your Crypto Wallet Key Into a Website. Don't.

Coinbase Commerce shuts down March 31 and its migration tool asks users to enter their seed phrase into a web form. Security researchers are alarmed -- and they should be.

Read More

Update Everything: Chrome Zero-Days, Android's March Bulletin, and the Patch Gap That Puts You at Risk

Two Chrome zero-days under active attack, 129 Android vulnerabilities in March, and the stubborn reality that 'patch available' and 'you're protected' are two very different things.

Read More