30
30
30
55
30
30
30
30
42
60
55
45
45
30
60
45
57
30
30
57
55
4.1 Million Impacted by AdaptHealth Data Breach
AdaptHealth disclosed a breach affecting 4,115,802 people after a socially engineered attacker stole health and insurance data from cloud-based patient systems.
A threat actor used social engineering to hijack a user session at a third-party contractor and gained access to AdaptHealth cloud applications, including patient management and document storage systems, in early June. Names, contact and demographic information, and health and health insurance data were exfiltrated; Social Security numbers and financial information were not affected. AdaptHealth reported 4,115,802 affected individuals to HHS, whose breach portal listed the incident this week; Baylor Genetics separately reported 2,810,878 individuals affected in a related June healthcare breach.
76
Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning
Opinion piece urges organizations to begin post-quantum cryptography migration now, citing harvest-now-decrypt-later risk and NIST deadlines.
CSO Online outlines why harvest-now-decrypt-later makes long-lived sensitive data a current risk even before quantum computers exist. It cites NIST IR 8547 timelines deprecating RSA-2048 and ECC P-256 by 2030 and removing them by 2035, finalized FIPS standards ML-KEM, ML-DSA, and SLH-DSA, upcoming FN-DSA (FIPS 206), NSA requirements for national security systems from 2027, and UK NCSC phased guidance through 2035. The author recommends cryptographic discovery, crypto-agility, and prioritizing long-confidentiality data and TLS endpoints.
40
ICE Collecting DNA Samples
ICE's DNA collection program projects detainee samples to reach 33% of CODIS offender index by 2030, raising privacy concerns.
A Schneier on Security blog post discusses ICE collecting DNA samples from detainees, citing Georgetown Law research. DHS detainee samples are projected to constitute 33% of the FBI's CODIS offender index in 2030, up from 0.2% in 2019. The post raises concerns that samples collected under civil authority are being searched against crime scenes indefinitely, potentially without legal cause under Fourth Amendment standards.
25
55
30
42
42
30
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More
60
42
30
42
57
55
30
55
42
60
30