The full corpus — beyond today's front page.
498 results · page 14 of 21
A California resident filed a federal class action lawsuit against TikTok on June 11, 2026, alleging a data breach exposed the personal information of more than 2.4 billion users. The complaint claims TikTok stored user data without encryption and failed to implement basic security measures.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Trump administration to require states to adopt election security measures to receive FEMA funds, DHS says Reuters
In a rare combined cybersecurity/squid post, a twenty-nine-year-old squid proxy bug can leak HTTP requests. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Who should care: Cybersecurity · Privacy officers · Administrators
A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive materials, improve how researchers can report agency vulnerabilities and develop plans for similar incidents, the agency said in a forensic report released Thursday. The blog post outlines CISA’s response to the leak that the researcher who discovered it […] The post CISA looks to remedy ailments from big May credential leak appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready cybersecurity. The post Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative appeared first on Microsoft Security Blog.
Who should care: General readers · AI governance · Policy
The Electronic Frontier Foundation has a new Executive Director, who used an introductory message to frame the current moment as a turning point for digital rights, civil liberties, and the balance of power between individuals and institutions. The statement signals the organization intends to mobilize its community around those issues.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
AI agents are accelerating the growth of non-human identities, making it harder for organizations to understand what exists, who owns it, and what it can access. Netwrix explains why stronger visibility and identity governance are essential as AI expands the enterprise attack surface. [...]
Who should care: General readers · AI governance · Policy
On July 7, 2026, the Irish National Cyber Security Centre (“NCSC”) published guidance for management boards and senior executives of organizations subject to the EU’s Network and Information Security Directive (“NIS2”). Reflecting a central theme of NIS2, the Guidance makes it clear that cybersecurity is no longer solely a technical issue, but a governance and... Continue Reading…
Who should care: Lawyers · Compliance
A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
OpenAI has released GPT-5.6 Sol, described as its most capable model to date, following a delay caused by U.S. government restrictions tied to cybersecurity concerns about advanced AI systems.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Staggered release of ChatGPT 5.6 follows similar restrictions on rival firm Anthropic’s latest AI models OpenAI released its latest advanced AI model, called ChatGPT 5.6, on Thursday after earlier delaying the public rollout over US government concerns about cybersecurity. The Trump administration had requested last month that OpenAI limit the release to a small group of government-approved users. OpenAI complied with the White House’s request last month. The company stated in a blogpost that it had briefed government officials on ChatGPT 5.6’s capabilities and restricted the model to trusted…
Who should care: General readers · AI governance · Policy
Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase. [...]
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
The IAPP has published a Brussels-focused briefing examining how the European Union is approaching the intersection of artificial intelligence regulation and cybersecurity policy. The piece reflects ongoing EU efforts to coordinate its AI Act framework with broader digital security obligations.
Who should care: General readers · AI governance · Policy
Accenture, a global consulting and professional services giant, has confirmed a security intrusion after a hacker publicly claimed to have stolen 35GB of data from the firm. The breach was reported by The HIPAA Journal, suggesting potential concern about healthcare-related data among the compromised material.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platform. This blog analyzes how the malware incorporates code from several previously separate malware families and provides guidance to help defenders detect and defend against similar threats. The post GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Security operations don't slow down when IT teams take vacation, but staffing levels often do. Kaseya explains how AI-driven automation can help organizations maintain consistent security operations and reduce reliance on manual processes year-round. [...]
Who should care: General readers · AI governance · Policy
Trump cut to food security survey could make measuring US hunger harder Reuters
The White House issued two sweeping AI directives in June 2025, ordering rapid AI adoption and stronger cyber defenses across federal agencies and the national security apparatus. Despite the ambition of these mandates, analysts point to a significant funding shortfall in the FY2026 budget as the central obstacle to carrying them out.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Federal AI policy has shifted again, prompting questions about whether organizations working with government systems have updated their security infrastructure to match the new requirements. Washington Technology flagged the development as a practical readiness concern for those operating in or alongside the federal space.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
WATCH: Trump doesn't refute Iran security concerns for new Air Force One PBS
At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Future Initiative (SFI), to guide what a well-defended cloud service looks like. But defining the requirements is only the start. Meeting the requirements means continuously evaluating our live services against them, at AI speed. The post Protecting Microsoft at AI speed: How SFI proactively hardens our cloud appeared first on Microsoft Security Blog.
Who should care: General readers · AI governance · Policy
The communication, adopted in Strasbourg on July 7, is built around three pillars: making frontier AI “safe, accessible and deployable” for European cybersecurity, preparing the EU’s cyber ecosystem and scaling European AI capabilities.
Who should care: General readers · AI governance · Policy
With risk-based personnel vetting practices, U.S. AI labs can keep recruiting the world’s best researchers while safeguarding national security. The post Vetting Foreign AI Talent: Security Without Exclusion appeared first on Just Security.
Who should care: General readers · AI governance · Policy