HIPAA and Privacy

• HIPAA
• Privacy

• UK Government Reticent Over Power Plant Hack

  Government Tight Lipped Over Possible Iranian Hack, Experts Complain
  Operational technology security leaders are calling on the British government to release technical details of a cyberattack last month that took a small power plant offline for four days. So far, the government's public statements have "been very limited, and hopefully, we'll find out more soon."

• Zimbra Exploitation Spreads as Thousands Stay Unpatched

  More Than 8,000 Unpatched Instances Remain Exposed to CVE-2026-73570
  Attackers have compromised at least 267 Zimbra installations through a likely CVE-2026-73570 campaign, while more than 8,000 unpatched servers remain exposed to unauthenticated remote code execution that can give attackers access to mail data and system resources.

• US Lawmakers Urge Probe of Trump Cyber Workforce Cuts

  House Lawmakers Ask Watchdog to Assess Staffing Losses at US Cyber Agency
  House Democrats are asking the Government Accountability Office to examine how staffing reductions and cuts at the Cybersecurity and Infrastructure Security Agency have affected the agency's ability to defend federal networks and critical infrastructure.

• Car Infotainment Malware Builds Criminal Proxy Botnet

  DoFun Software Updates Exploited to Infect Android Head Units
  Attackers are exploiting legitimate software updates to infect Android-based car infotainment systems, or head units, turning them into reverse proxies. Kaspersky linked the malware campaign to the MoYu Group, a threat actor linked to BADBOX and BADBOX 2.0.

• OCC Issues Volcker Rule Proposal for Public Comment

  The Office of the Comptroller of the Currency requested public comment on a proposed regulation implementing the so-called "Volcker Rule" requirements of section 619 of the Dodd-Frank Wall Street Reform and Consumer Protection Act.