Polski
Cybersecurity on the Offensive: The DentaQuest Breach, Leaky Clouds, and a Record-Breaking Patch Tuesday
September 2026 is a reminder that cybersecurity never takes a holiday from bad news. This time we have a massive-scale healthcare data breach, a report showing that public cloud identity management still stands on shaky ground, and Microsoft breaking its own record for the number of patches released in a single month. Three stories, one conclusion: a routine approach to security is no longer enough. Let's look at what this means for businesses and administrators.
01 · Data Protection
DentaQuest: 15 Million Accounts and a False Sense of Security
The ransomware group ShinyHunters carried out an attack on DentaQuest, a US dental insurance provider, which was discovered in May 2026. The scale of the breach is enormous – the data of more than 15 million people was exposed, including Social Security numbers and information from the Medicaid and Medicare programs [1].
The most important takeaway from this case, however, isn't the number of victims, but how easy it is to fall into a false sense of security. A standard credit freeze, which many experts recommend as the first line of defense after a breach, does nothing to protect against medical identity fraud. A criminal armed with someone's dental plan number can claim health benefits under that person's name, and this kind of activity won't show up on the victim's credit report at all, since it runs through an entirely different billing system than cards or loans. This shows that companies handling medical and insurance data need separate incident response procedures – simply copying the playbooks used for financial breaches isn't enough.
02 · Cloud Security
Cloud Security: Solid on Paper, Leaky in Practice
The second story of the week comes from hard data in Intruder's "2026 Cloud Security Index" report, which exposes the scale of identity and access management (IAM) problems across cloud environments. Weak IAM controls or inadequate event logging affect anywhere from 80% to 98% of cloud accounts, depending on the provider and the size of the organization [2].
Interestingly, each of the major providers has its own Achilles' heel. AWS leads in misconfigurations across five of the six categories studied, Azure most often falls short on securing data at rest, and Google Cloud struggles with over-privileged service accounts. The most worrying trend, though, is that the problem grows with scale: a full 98% of large enterprises have weak IAM controls. In other words, more resources and a bigger security budget don't translate into better access hygiene – often quite the opposite, since environment complexity grows faster than teams' ability to oversee it. For businesses, this means cloud permission audits need to be an ongoing process, not a one-off implementation project.
03 · Patch Management
A September with a Record Number of Patches from Microsoft
The third story is a reminder that even the best-managed IT environment needs constant groundwork. September's Microsoft Patch Tuesday brought a total of 974 fixes – one of the largest monthly patch batches in the company's history – including two zero-day vulnerabilities actively exploited in attacks [3].
Most of the fixes landed where you'd expect: Windows (723) and the Office suite (222). Additional bulletins also covered SQL Server, SharePoint, Azure, and Exchange – essentially the entire ecosystem that most organizations' day-to-day work relies on. For IT departments, this means one thing: patch management is no longer a routine checklist item but a full-fledged project requiring prioritization, testing, and rapid rollout – especially for zero-day flaws patched on the fly, which attackers often exploit before the fix even reaches every workstation.
Summary
Summary
This week ties three seemingly unrelated stories together with one thread – a routine approach to data, identity, and infrastructure security no longer cuts it. The DentaQuest breach shows that protecting medical data requires different tools than protecting financial data, the Intruder report shows that the public cloud is still secure mainly on paper, and the record-breaking Patch Tuesday shows that the scale of threats is growing faster than IT teams' ability to respond.
We'll be discussing how to respond to these challenges in practice at the International Cybersecurity Fair – CYBER SECURITY Expo Poland 2026. It's a chance to see cloud identity management solutions, sensitive data protection, and patch management automation live, and to talk with experts who deal with these kinds of incidents every day. We hope to see you there!
Invitation
The DentaQuest breach, leaky clouds, and a record-breaking Patch Tuesday are just the tip of the iceberg – see live how experts tackle these challenges at the International Cybersecurity Fair CYBER SECURITY Expo Poland 2026. You'll find IAM solution providers, medical data protection specialists, and patch management automation vendors all in one place. Don't wait for the next breach headline – act now.
CYBER SECURITY Expo Poland 2026Footnotes
[1] GetOutOfDebt.org — https://getoutofdebt.org/269774/dentaquest-data-breach-2026-medical-identity-theft[2] Help Net Security — https://www.helpnetsecurity.com/2026/08/14/intruder-cloud-misconfiguration-trends-report/
[3] The Cyber Express — https://thecyberexpress.com/patch-tuesday-september-2026/