Healthcare IT
DentaQuest Breach: 15 Million Notified, 2.6 Million Leaked
DentaQuest is notifying more than 15 million people after a three-day intrusion in May. The dataset ShinyHunters published covers 2.6 million.
Security
AI
The AI Kill Switch Act Formalizes the Power Commerce Improvised
A bipartisan House bill would make frontier AI developers keep a working off switch and let DHS order it thrown. Two incidents this summer explain why.
AI
GPT-5.6 Found a $500K WordPress Zero-Day for $25
A security researcher pointed GPT-5.6 Sol Ultra at the WordPress codebase and got back a pre-authentication remote-code-execution chain affecting 500 million sites — for about $25 in subscription tokens. The patch is out, exploitation has started, and the economics of vulnerability research just changed.
Technology
Microsoft's July 2026 Patch Tuesday: 570 Flaws, 3 Zero-Days
Microsoft's July Patch Tuesday ships 570 fixes by BleepingComputer's count, 621 by ZDI's — two exploited zero-days in AD FS and SharePoint included. June's all-time record lasted exactly one month, and Microsoft spent the preceding week explaining why: an AI discovery harness now feeds the pipeline, and volumes go up from here.
Technology
iOS 26.5.2: Apple Ships Security Fixes Early, Citing AI Threats
Apple shipped iOS 26.5.2 on June 29 with more than two dozen security fixes and no actively exploited zero-day. The real story is the timing: Apple is now pushing patches out ahead of the next major release, and told Reuters that AI-accelerated hacking is why.
Technology
FortiBleed Leak Hits 74,000 Fortinet Firewalls: What to Do
A leaked database of working Fortinet VPN and admin credentials — CISA counts roughly 74,000 affected devices — is being used to break into networks. Upgrading FortiOS doesn't retroactively fix the weak password hashes; here's what to check and do.
Technology
RoguePlanet Gives SYSTEM on Patched Windows. The Bigger Story Is Why.
A researcher dropped a seventh Windows zero-day hours after Patch Tuesday: RoguePlanet spawns a SYSTEM shell on fully-patched Windows 10 and 11, with no CVE and no fix. The exploit is narrower than it sounds — but the disclosure war that produced it is the part worth watching.
Technology
Microsoft's June 2026 Patch Tuesday: A Record 200 Flaws, 3 Zero-Days
The largest Patch Tuesday ever shipped: roughly 200 vulnerabilities, 33 Critical, three publicly disclosed zero-days, and a CVSS 9.8 in Nuance PowerScribe that radiology shops should not sit on. The Secure Boot certificate deadline is 17 days out — this is the last Patch Tuesday before it.
AI
Anthropic's Claude Compliance API: 28 Security Partners on Day One
Anthropic launched the Claude Compliance API on May 21 with 28 partner integrations spanning CrowdStrike, Palo Alto Networks, Okta, Zscaler, Microsoft Purview, Wiz, and IBM Guardium. It does the unglamorous job of routing Claude traffic into the same dashboards your security team already runs for everything else.
Healthcare IT
HIPAA Security Rule Update Likely to Miss Its May 2026 Target
OCR's May 2026 target for finalizing the HIPAA Security Rule update is on track to slip — but the agency is enforcing the existing rule aggressively. Here's where the proposed rule stands, what OCR is actually doing today, and what healthcare organizations need to have in place either way.