CISO Intelligence

CISO Intelligence

Starr Insurance Discloses Ransomware Attack

Source: HIPAA Journal  ·  Category: Ransomware & Breach Starr Insurance suffered ransomware attack with data breach. Insurance sector breach may implicate state insurance regulators and HIPAA if health data involved. Monitor for regulatory enforcement and potential class action exposure for the insurer and downstream liability for firm clients. → Read the full

CISO Intelligence

CMS Found to Have Leaked Providers’ SSNs

Source: HIPAA Journal  ·  Category: Ransomware & Breach CMS exposed a database containing healthcare providers' Social Security numbers. Law firms representing healthcare providers may face client notification requests and potential regulatory scrutiny. HIPAA breach notification rules (60-day deadline) and state AG reporting may apply depending on exposure scope. → Read the

CISO Intelligence

A DOD contractor’s API flaw exposed military course data and service member records

Source: CyberScoop  ·  Category: Ransomware & Breach DOD contractor Schemata exposed API flaw leaking military course data and service member records. Government contractor breach; law firms representing federal contractors or DOD should alert clients to review their vendor management and incident response protocols. → Read the full article

CISO Intelligence

RXNT Notifies Customers About Cybersecurity Incident and Data Breach

Source: HIPAA Journal  ·  Category: Ransomware & Breach RXNT (EHR vendor) disclosed cybersecurity breach to customers. Law firms with healthcare clients using RXNT should monitor for client notification obligations and regulatory filings under HIPAA Breach Notification Rule (60-day deadline). Client liability exposure depends on data scope. → Read the full article

CISO Intelligence

Instructure Breach Exposes Schools' Vendor Dependence

Source: Dark Reading  ·  Category: Supply Chain ShinyHunters breached Instructure/Canvas, a widely deployed learning management system used by schools. Law firms with educational institution clients or internal training systems using Canvas should assess exposure and prepare client notification if firm data was stored there. Vendor compromise highlights third-party risk in

CISO Intelligence

Missouri regulators escalate pressure on Conduent over data breach potentially affecting millions

Source: DataBreaches.net  ·  Category: Ransomware & Breach Missouri regulators escalate pressure on Conduent over national data breach affecting millions. Conduent is major insurance/benefits vendor; if firm clients use Conduent, expect regulatory investigation and class action risk. Monitor state AG guidance on notification deadlines. → Read the full article

CISO Intelligence

Vimeo data breach exposes personal information of 119,000 people

Source: DataBreaches.net  ·  Category: Ransomware & Breach ShinyHunters breached Vimeo in April, exfiltrating personal data on 119,000 users. Law firms using Vimeo for client presentations or depositions may face client notification obligations if any firm data was compromised. Assess whether the firm or clients' data was affected and

CISO Intelligence

Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

Source: The Hacker News  ·  Category: Supply Chain Palo Alto PAN-OS CVE-2026-0300 (buffer overflow in User-ID Authentication Portal) exploited in wild for unauthenticated RCE (CVSS 9.3). Critical for law firms using Palo Alto firewalls with internet-facing authentication portals; patch immediately or disable portal. → Read the full article

CISO Intelligence

MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack

Source: The Hacker News  ·  Category: Nation-State Iranian state-sponsored MuddyWater conducts false-flag ransomware attack using Microsoft Teams social engineering for credential theft. Law firms are lucrative targets; MuddyWater's use of Teams (ubiquitous in legal environments) increases firm attack surface. Monitor for Teams-based phishing. → Read the full article

CISO Intelligence

Why ransomware attacks succeed even when backups exist

Source: BleepingComputer  ·  Category: Ransomware & Breach Ransomware attackers routinely destroy backup systems before encryption to eliminate recovery paths, rendering backups useless despite existence. Law firms must implement immutable, air-gapped, or off-site backup strategies and test recovery procedures regularly to ensure resilience against backup-targeting attacks. → Read the full article

CISO Intelligence

Attackers Continue to Pose as Help Desks in Social Engineering Attacks

Source: KnowBe4 Blog  ·  Category: Threat Actor & Campaign Google's Threat Intelligence Group reports ongoing social engineering attacks where adversaries impersonate help desks to compromise employee credentials. Law firms should strengthen employee phishing training and implement multi-factor authentication on all critical systems. → Read the full article

CISO Intelligence

When Your Vendor’s Breach Becomes Your Lawsuit: Privacy Risk Lessons from Recent Bank Litigation

Source: DataBreaches.net  ·  Category: Regulatory & Legal Bank litigation highlights vendor breach liability exposure. Class actions filed within weeks of bank confirming third-party breach. Law firms must counsel financial services clients on vendor due diligence, SLA indemnification, and cyber insurance requirements to limit downstream liability. → Read the full article