Email provider news

Research shows that generative AI is helping cybercriminals develop customized malware, create convincing phishing messages, and accelerate ransomware attacks.

OpenCode confirmed on October 17, 2026 that attackers breached its Console service, potentially exposing API keys that users stored for OpenAI, Anthropic and Google AI models.

An analyst traced one phishing email to dozens of lookalike domains impersonating manufacturers, staffing agencies, and waste haulers.

Researchers reviewed 59 case studies and 3,408 health forums, finding harms recorded nowhere in formal reporting systems.

Microsoft's annual report covers July 2025 to June 2026 and records more than 46 million business contact impersonation attacks.

Healthcare's latest attacks often start with a phone call: someone posing as IT support calls an employee or the help desk and talks them onto a lookalike login page. Health-ISAC's Q3 2026 Health Sector Heartbeat, published October 21, attributes most of the quarter's rise in health-sector incidents to these…

HHS skipped the HIPAA penalty inflation adjustment this year. Every penalty stays at its 2025 amount, OCR kept settling cases through 2026, and HIPAA Journal expects the 2027 adjustment to cover two years of inflation at once.

Attackers are sending phishing lures as calendar invite files that drop straight onto the recipient's calendar, where the event can stay even after the original email is deleted. KnowBe4 reported on October 23, 2026 that the technique is now built into popular phishing kits, which makes it available to attackers with…

There's quite a bit you can include in an email to a patient about their GLP-1 prescription. You can let them know what drug they're taking and at what dose. You can include information about titration and how to take it, as well as information about side effects.

The funds will settle a class action lawsuit stemming from a 2025 data breach.

The breach was the result of a voice phishing (vishing) attack in August of 2026.

Transformative Health allegedly billed MassHealth for services that weren’t needed and failed to adequately prepare for a data breach.

Artificial intelligence (AI) in healthcare Research on artificial intelligence in healthcare and education defines AI as "the development of computer systems that can perform tasks that typically require human intelligence, such as perception, reasoning, and decision-making."

NSA, NIST, and CISA have issued new guidance to help organizations detect and respond to rogue AI agents that act outside their intended scope.

Passwords are often the first line of defense against unauthorized access to user accounts, making secure password practices essential. The National Institute of Standards and Technology (NIST) emphasizes password length over complexity, recommending long passwords or passphrases that are difficult to guess.

Electronic health records, e-prescribing, patient portals, telehealth platforms, scheduling tools, imaging viewers, and lab interfaces run on servers, databases, load balancers, APIs, and network connections.

With a platform that will sign a business associate agreement (BAA), you can tell the patient nearly everything they need such as the medication, the dose, the tracking number, the delivery window and the refrigeration instructions. Without a BAA, you can tell them nothing that identifies them as your patient.

When a patient books an appointment online, they may provide their name, email address, phone number, appointment date and the type of healthcare service they need. Depending on the booking system, the website may also collect their IP address, device information, and browsing activity.

According to Paubox’s 2026 Healthcare Email Security Report, healthcare organizations reported 170 email-related incidents to the HHS Office for Civil Rights in 2025. That total is down from the year before, but Paubox found that most incidents still involved phishing, credential compromise, spoofing, or improper…

If the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) receives a HIPAA complaint, it will review it to see if it has jurisdiction over the matter. If OCR accepts the complaint for investigation, it notifies the complainant and the organization and requests relevant information.

Most covered entities and business associates will find that the Iowa Consumer Data Protection Act (ICDPA) has little impact on HIPAA, but some organizations will need to keep it in mind. The ICDPA exempts any persons who are subject to and comply with HIPAA and also excludes protected health information (PHI) as a…

Paubox now offers Security Awareness Training as an add-on to Paubox Email Suite, letting an administrator pick a scenario such as a fake Microsoft login reset and send it to staff. Results show who opened the message, who clicked, and who entered credentials.

California Attorney General Rob Bonta announced an approximately $6 million settlement with Chrome Holding Co., formerly 23andMe, on October 19, 2026.

Researchers recorded 896 terabytes taken between April 2025 and March 2026, while the number of victims named on leak sites fell.

Meta Ads are paid digital advertisements that run across Meta's family of apps, including Facebook, Instagram, Messenger, and WhatsApp. Businesses and creators use Meta Ads to reach specific audiences and accomplish core marketing goals, such as increasing brand awareness, generating leads, and driving conversions.