Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Telecommunications providers sit at the center of modern life, carrying the calls, messages, locations, account credentials, and identity data that connect billions of people and businesses. Which makes them uniquely valuable targets: criminals want subscriber records they can monetize, while nation-state actors want access to the networks themselves. The biggest telecom data breaches show how quickly weak security measures can escalate from a customer privacy incident into a national security event.

CareCloud, Inc. is a publicly traded healthcare technology company headquartered in Somerset, New Jersey. The company provides electronic health records, medical billing, practice management, and revenue cycle services to more than 45,000 healthcare providers across the United States. Because it stores patient records and billing information on behalf of hospitals, doctors' offices, and other medical practices, CareCloud holds sensitive data belonging to millions of patients.

A threat actor using the alias TheHatman is selling employee databases allegedly stolen from the Microsoft Azure cloud environments of some of the world's largest companies. Beginning on July 31, 2026, the cybercriminal posted a series of listings on underground forums advertising data dumps from at least nine major organizations, claiming the records were downloaded directly from corporate Azure tenants using compromised credentials.

Attackers dumped everything they harvested from LiteLLM builds during a 40-minute window in March. Here is what is inside and what it says about where secrets live.

In June, the Texas Parks and Wildlife Department (TPWD) disclosed that a vendor running its hunting and fishing license system had been compromised, potentially exposing personal data belonging to more than three million people. Weeks earlier, Carnival Corporation confirmed that an attacker had socially engineered an employee into granting access to part of its IT environment, affecting close to six million individuals. Different sectors. Different attack paths.

Every time a cyber breach breaks headlines, leadership teams pose the same urgent question: Does this affect us? But a third-party risk team is likely already asking: Was one of our vendors, suppliers, partners, or other third parties involved? And increasingly: What if it was not our direct vendor, but one of theirs?

Medtronic Plc is an American-Irish medical device company founded in 1949. As one of the largest medical device companies in the world and with over 90,000 employees, the company operates in about 150 countries. Its products treat 70 health conditions, helping an estimated 75 million people globally every year. Earlier in 2026, the company was the victim of a cybersecurity incident that impacted some of its corporate IT systems.