Search & browse the archive

War on the Rocks · Jul 15, 2026 · International

Before the Next Mythos Moment: The Case for an AI Threat Fusion Center

After Anthropic determined its Mythos 5 model posed serious cybersecurity risks and launched a controlled-access collaboration with defenders called Project Glasswing, the U.S. government ordered the model taken down in June 2026. Anthropic disputed the basis for the shutdown, arguing the triggering vulnerability was a narrow, non-universal jailbreak rather than a systemic threat.

Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy

Supreme Court justices detail security risks and weigh in on ethics in rare congressional testimony

Supreme Court justices appeared before Congress in an unusual public session, addressing both the physical security threats they face and ethical concerns surrounding the court. The testimony was notable for its rarity, as justices seldom submit to direct legislative questioning.

Atlanta beefs up security ahead of England-Argentina World Cup semi-final

Atlanta beefs up security ahead of England-Argentina World Cup semi-final Reuters

DataBreaches.net · Jul 14, 2026 · International

Elon Musk promises to delete all data following a leak of users’ confidential information

xAI, Elon Musk's AI company, announced emergency measures after a tool called Grok Build CLI reportedly uploaded users' private code and confidential information to an external server without authorization. The company says it will permanently delete all data that was collected.

Who should care: Cybersecurity · Privacy officers · Administrators

Krebs on Security · Jul 14, 2026 · International

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

UK's PM-in-waiting Andy Burnham calls for serious review of lawmakers' security

UK's PM-in-waiting Andy Burnham calls for serious review of lawmakers' security Reuters

Fifty migrants feared lost in Mediterranean, 10 survive after boat capsizes, security sources say

Fifty migrants feared lost in Mediterranean, 10 survive after boat capsizes, security sources say Reuters

Schneier on Security · Jul 14, 2026 · International

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking (virtually) at the Policy-Relevant Privacy Research Workshop in Calgary, Canada, on Monday, July 20, 2026. I’m speaking at Boston Leadership Exchange in Boston, Massachusetts, USA, on Wednesday, July 22, 2026. I’m speaking at Cognitive Security Conference in Las Vegas, Nevada, USA. The conference runs August 6-7, 2026; my speaking time is TBD. I’m speaking at DEF CON 34 in Las Vegas, Nevada, USA. The conventions runs August 6-9, 2026; my speaking time is TBD...

Who should care: General readers · Privacy officers · Policy

Retool Survey: Only 8% of Tech Leaders Have Strong AI Governance

A survey by Retool found that only 8% of technology leaders consider their organizations to have strong AI governance in place, suggesting that most companies deploying AI are doing so without mature oversight structures.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

The Guardian — Tech · Jul 14, 2026 · International

Anthony Albanese promises fast-track approvals for datacentres to shore up AI investment

Australian Prime Minister Anthony Albanese announced accelerated approval processes for AI infrastructure projects, including data centres, and the creation of a new Office of AI within his department. The office is intended to consolidate oversight of economic, social, security, and environmental dimensions of AI under a single government body.

Who should care: General readers · AI governance · Policy

Justices Barrett, Kagan testify before Congress as court seeks security funds

Justices Barrett, Kagan testify before Congress as court seeks security funds Reuters

Russia says there can't be security guarantees for Ukraine without its involvement

Russia says there can't be security guarantees for Ukraine without its involvement Reuters

Privacy Commissioner of Canada · Jul 14, 2026 · Canada

News release: WestJet commits to improving security measures following a data breach

I need to work with what the headline and label imply — a WestJet news release announcing commitments to improve security following a data breach — without inventing specifics. ```json { "summary": "WestJet has issued a public statement committing to strengthen its security practices in the wake

Who should care: Cybersecurity · Privacy officers · Administrators

Nextgov/FCW · Jul 14, 2026 · US Federal

AI, once relegated to helping hackers with certain tasks, can now power every stage of a cyberattack

Researchers determined that AI was used in steps across entire cyber operations to identify security flaws, generate commands and carry out parts of intrusions, sometimes with little human oversight. Both U.S. and Chinese AI models have been involved.

Who should care: General readers · AI governance · Policy

Microsoft Threat Intelligence · Jul 13, 2026 · International

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications. The post Defending SaaS-based applications against ShinyHunters OAuth abuse appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

Nextgov/FCW · Jul 13, 2026 · US Federal

Russian hackers exploit weak router security to breach critical infrastructure, Western allies warn

The guidance comes as the United Kingdom and European Union blamed a major Russian intelligence unit for an attempted attack on Poland’s power grid last year.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

Facewatch retail facial recognition to notify police of repeat offender matches

Facewatch, a UK facial recognition service used by retailers, is expanding its system to automatically notify police when a person flagged as a repeat offender is identified in a store. The move extends the technology's reach beyond private security alerts into direct law enforcement integration.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

Nextgov/FCW · Jul 13, 2026 · US Federal

DHS network intrusion was twice ruled a false positive before breach confirmed

Suspicious network activity on a Department of Homeland Security system supporting U.S. World Cup operations was initially flagged twice as a false positive before investigators confirmed an actual intrusion had occurred. The breach involved the Homeland Security Information Network, a platform used to coordinate security efforts around the event.

Who should care: Cybersecurity · Privacy officers · Administrators

Krebs on Security · Jul 13, 2026 · International

Lessons Learned from CISA’s Recent GitHub Leak

CISA released a postmortem after a contractor accidentally published dozens of internal credentials, including AWS GovCloud keys, to a public GitHub repository, where they sat exposed for nearly six months before journalist Brian Krebs alerted the agency. Security experts say the incident reveals gaps in how CISA detected and responded to the exposure.

Who should care: Cybersecurity · Privacy officers · Administrators

BleepingComputer · Jul 13, 2026 · International

Breach at the Beach: Play the Ultimate Entra ID CTF

Varonis has released a free, hands-on Capture the Flag challenge designed to teach security practitioners how attackers exploit Microsoft Entra ID, using realistic scenarios to simulate common identity-based attack techniques.

Who should care: Cybersecurity · Privacy officers · Administrators

Just Security · Jul 13, 2026 · US Federal

Civilian Protection in the Age of Military AI: What Congress’s New Legislative Proposals Reveal About Emerging Safeguards

Senate lawmakers are advancing legislation to shape how the Department of Defense builds and deploys artificial intelligence in military operations. The proposals reflect growing congressional attention to setting boundaries around AI use in contexts where decisions can carry lethal consequences.

Who should care: Lawyers · Compliance · General readers · AI governance · Policy

Hudson Public Schools considering facial recognition-based security system

Hudson Public Schools is weighing the adoption of a facial recognition system as part of its security infrastructure. The proposal is under community consideration, with no final decision reported yet.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

CyberScoop · Jul 13, 2026 · US Federal

AI-generated code has made security debt a governance problem

Moving from tool approval to true governance is the only way for CISOs to keep pace with the accelerating velocity of software risk. The post AI-generated code has made security debt a governance problem appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

Politico — Tech · Jul 11, 2026 · International

‘Not where they hoped it'd be’: Launch of Trump AI promotion program underwhelms

The Trump administration's initiative to promote American AI development and global leadership has gotten off to a rocky start, with insiders acknowledging the rollout has fallen short of expectations. Tensions between aggressive promotion goals and improvised security restrictions appear to be slowing progress.

Who should care: General readers · AI governance · Policy