PrivacySignal

Search & browse the archive

The full corpus — beyond today's front page.

Reset

1342 results · page 14 of 56

Breach
Krebs on Security · · International

FBI Arrests Founder of Ransomware Negotiation Firm

The FBI arrested the co-founder of a Canadian cybersecurity firm specializing in ransomware negotiation, in connection with an investigation into the ShinyHunters hacking group. ShinyHunters recently obtained sensitive data on thousands of FBI agents.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#security Read original →
Breach
HIPAA Journal · · US Federal

Valley Oaks Health Data Breach Settlement Gets First Nod from Court

A court has granted preliminary approval to a class action settlement stemming from a June 2023 data breach at Valley Oaks Health, a mental health provider, that affected more than 50,000 individuals. The case now moves toward final approval and distribution of relief to those affected.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
News
BleepingComputer · · International

How to keep AI agents within their permissions

AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy. [...]

Who should care: General readers · AI governance · Policy

Enforcement
EDPB · · EU

Italian DPA fines security company EUR 39 000 for violations concerning employees’ data

Italy's data protection authority fined security firm La Patria S.p.A. €39,000 following an employee complaint. The violations involved failures to provide transparent privacy information and blocking workers from accessing their own personal data.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
AI Governance
H Help Net Security · · International

Companies want autonomous IT operations but hesitate to let AI act alone

Businesses are interested in autonomous AI systems that can manage IT operations without human involvement, but remain reluctant to fully remove people from the decision loop. The tension reflects broader uncertainty about how much independent action AI agents should be trusted to take in critical infrastructure.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

#ai-governance#ai Read original →
News
Inside Privacy (Covington) · · International

CISA Submits Final CIRCIA Rule for OMB Review

On October 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”) to the Office of Information and Regulatory Affairs (“OIRA”) for interagency review, marking one of the final steps before the Final Rule will be... Continue Reading…

Who should care: Lawyers · Compliance

#regulation Read original →
Breach
Ars Technica — Policy · · International

Trump Mobile hack and apparent lack of FCC authorization raise security alarms

A hack and data breach affecting Trump Mobile has drawn scrutiny from a U.S. senator, who is questioning why the carrier appears to lack certain required FCC filings. The combination of a security incident and potential regulatory gaps has prompted calls for answers about the company's oversight.

Who should care: Cybersecurity · Privacy officers · Administrators

AI Governance
EFF — Deeplinks · · International

It's DAF Day! Wait...What's a DAF?

The Electronic Frontier Foundation is using DAF Day — a fundraising moment centered on donor-advised funds — to solicit charitable grants in support of its work on privacy, encryption, AI, and digital rights.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers

#ai-governance#ai#privacy Read original →
AI Governance
C Cybersecurity Dive · · International

What the C-suite needs to know about AI governance

A report aimed at senior executives outlines what business leaders need to understand about AI governance as companies face growing pressure to manage AI risks at the organizational level.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

#ai-governance#ai Read original →
AI Governance
P Punchbowl News · · International

Sen. Adam Schiff on AI regulation, data centers and China

Senator Adam Schiff spoke publicly about his views on AI regulation, data center policy, and the competitive and security dimensions of China's role in the AI landscape.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

#ai-governance#regulation#ai Read original →
Breach
BleepingComputer · · International

OAuth grants pile up faster than you can review them. Here's how to keep up.

OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard [...]

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#security Read original →
Breach
EDPB · · EU

Hellenic DPA decision on a data breach involving E.E.T.A.A. S.A. as processor for the Ministry of Social Cohesion and Family Affairs

Greece's data protection authority ruled against the Ministry of Social Cohesion and Family Affairs following a large-scale personal data breach, finding violations across multiple GDPR articles including security, breach notification, and data protection by design. The ministry's processor, E.E.T.A.A. S.A., was also implicated in the decision, which resulted in fines and a compliance order.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy

#breach#enforcement#gdpr#regulation#privacy Read original →
Enforcement
EDPB · · EU

Swedish DPA fines Miljödata i Karlskrona approximately EUR 160 000 for insufficient technical and organisational measures to ensure information security

Sweden's data protection authority fined IT service provider Miljödata i Karlskrona roughly EUR 160,000 after a 2025 cyberattack exposed personal data belonging to 2.2 million individuals, with the stolen data later published on the darknet. The fine was issued under Article 32 of the GDPR for inadequate technical and organisational security measures.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Breach
BleepingComputer · · International

ASOS links data breach to social engineering attack, credential theft

ASOS has begun notifying customers of a data breach in which hackers used social engineering and stolen credentials to access personal data. The fashion retailer confirmed the incident occurred earlier this week.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy Read original →
AI Governance
Just Security · · US Federal

Just Security’s Artificial Intelligence Archive

Just Security has published an archive of more than 100 articles examining how artificial intelligence intersects with democracy, human rights, and warfare. The collection brings together analysis on AI's broader societal implications in one place.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

#ai-governance#ai Read original →
Breach Critical
BleepingComputer · · International

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

​​​On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients

Here’s another case where the folks who were supposed to be the good guys helping you may be harming you. Zohar Pinhasi, 50, also known as “Zack Silver” and “Zack Green,” a U.S. and Israeli national, was arraigned today in the Eastern District of New York on wire fraud charges relating to Pinhasi’s false representations... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
GDPR / Intl
NICCS (.gov) · · US Federal

Data Privacy for Businesses Workshop: Implementing Compliance With Global Regulations (e.g., GDPR, CCPA)

NICCS, a U.S. government cybersecurity training resource, is offering a workshop aimed at helping businesses implement compliance with major global data privacy regulations, including GDPR and CCPA.

Who should care: Lawyers · Privacy officers · AI governance · Compliance · General readers · Policy

#gdpr#state-privacy#regulation#privacy Read original →
← Prev Page 14 of 56 Next →