Search & browse the archive

Schneier on Security · Aug 04, 2026 · International

Iran Cyberattacks Against Minnesota Water Systems

Iranian actors have been tentatively linked to cyberattacks on water systems across at least seven U.S. states, including Minnesota, though attribution remains preliminary and no significant damage has been confirmed. The Trump administration has publicly rejected the Iran attribution, with the president suggesting Minnesota's own government is responsible.

Who should care: Cybersecurity · Privacy officers · Administrators

Microsoft Threat Intelligence · Aug 04, 2026 · International

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Microsoft has expanded its Zero Trust security strategy to cover AI agents and DevSecOps pipelines, releasing new tools and guidance aimed at helping organizations apply least-privilege and verify-everything principles to AI-driven environments.

Who should care: Lawyers · Compliance · General readers · AI governance · Policy

Microsoft Threat Intelligence · Aug 04, 2026 · International

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

Microsoft Defender automatically isolated a compromised QNET endpoint in 128 seconds, stopping a multi-stage attack before the payload could persist or spread. The post 128 Seconds to disruption: Microsoft Defender stops ransomware at QNET appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

HIPAA Journal · Aug 04, 2026 · US Federal

Privacy Concerns Raised Over Government Demand for Hospital Emergency Room Data

The U.S. Consumer Product Safety Commission is seeking digital patient data from hospital emergency rooms, reportedly to support its product safety mission. The request has drawn privacy scrutiny over how sensitive medical records would be collected, used, and protected under existing health privacy law.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

CyberScoop · Aug 04, 2026 · US Federal

Dem senators criticize Trump administration decisionmaking on AI security risks

The five senators said the administration has alternated between being too passive and overstepping, and China stands to benefit as a result. The post Dem senators criticize Trump administration decisionmaking on AI security risks appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

The Guardian — Tech · Aug 04, 2026 · International

Trump administration reportedly drafting ban on Chinese datacenter components

The Trump administration is reportedly drafting FCC rules that would ban U.S. imports of new Chinese datacenter components, starting with optical transceivers. The move is driven by concerns about China's rapid AI development and its implications for U.S. technology infrastructure.

Who should care: General readers · AI governance · Policy

Anthropic names global affairs chief to tackle AI policy as Trump tensions persist

Anthropic has appointed a global affairs chief to lead its AI policy work as the company navigates an uncertain regulatory environment under the Trump administration. The hire signals that Anthropic is building out formal political and government relations capacity as AI governance debates intensify.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

The European Union AI Act Transparency Rules Take Effect

A new set of transparency obligations under the EU AI Act have entered into force, requiring certain AI systems to clearly disclose their nature to users. The rules represent the first enforceable requirements of the landmark regulation to take hold across member states.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Apple to Face $32.5 Billion Lawsuit Over Facial Recognition in Photos App

Apple is set to face a lawsuit seeking $32.5 billion over allegations related to facial recognition technology embedded in its Photos app. The case centers on claims that Apple collected or processed users' biometric data without adequate consent.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

Apple Photos lawsuit over facial recognition data can move forward

A lawsuit alleging that Apple's Photos app collected facial recognition data without proper user consent has been cleared to proceed. The ruling allows plaintiffs to pursue claims that Apple processed biometric information in ways users were not adequately informed about.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

EPIC · Aug 04, 2026 · US Federal

EPIC, Coalition Urge Senate Commerce Committee to Advance Youth AI Privacy Act

EPIC and a coalition of consumer and child safety groups are calling on the Senate Commerce Committee to move forward with the Youth AI Privacy Act, a federal bill that would create privacy and safety protections specifically for minors interacting with AI chatbots.

Who should care: General readers · AI governance · Policy · Privacy officers

The Record · Aug 04, 2026 · International

Polish convenience store chain Żabka hacked through third-party account

Polish convenience store chain Żabka confirmed that attackers breached its systems in late July, apparently by compromising a third-party account to access its Jira project management environment and other sensitive data.

Who should care: Cybersecurity · Privacy officers · Administrators

Scaling Laws: DZ Kalman on the Role of Faith in AI Policy

I need to be careful here — the input is extremely thin. The headline and excerpt give almost no factual content beyond the subject and speaker name. I'll work only from what is reasonably implied. ```json { "summary": "In a piece published by Lawfare, DZ Kalman examines how assumptions about AI

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Inside Privacy (Covington) · Aug 04, 2026 · International

New York Publishes Final SAFE For Kids Act Rules

On July 28, 2026, the New York Office of the Attorney General released final rules (the “Rules”) implementing the Stop Addictive Feeds Exploitation (SAFE) for Kids Act, which goes into effect on January 25, 2027. The SAFE for Kids Act requires online “addictive social media platforms,” which are defined as websites, online services, and applications... Continue Reading…

Who should care: Lawyers · Privacy officers · Compliance

EU AI Act: Transparency and Enforcement Rules Take Effect as High-Risk Regime Is Deferred

Transparency and enforcement provisions of the EU AI Act have entered into force, while the more demanding high-risk AI requirements remain on a delayed timeline. The phased rollout means some obligations are now live, but the stricter rules governing AI systems with the greatest potential for harm are not yet in effect.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

BleepingComputer · Aug 04, 2026 · International

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

CyberScoop · Aug 04, 2026 · US Federal

Prolific ransomware group behind SonicWall zero-day attacks

The INC ransomware group has been identified as the most aggressive actor exploiting two SonicWall zero-day vulnerabilities, chaining them together to steal and encrypt victim data for extortion. While INC was not the first group to use these flaws, it has been the most effective.

Who should care: Cybersecurity · Privacy officers · Administrators

iapp.org · Aug 04, 2026 · International

Can we solve the cookie banner problem in the EU?

Can we solve the cookie banner problem in the EU? iapp.org

CyberScoop · Aug 04, 2026 · US Federal

Lawmakers spring to save ID theft services for OPM breach victims, with expiration looming

Federal lawmakers are pushing to extend identity theft protection services for victims of the 2015 Office of Personnel Management data breach before those services expire next month. Senator Mark Warner and Delegate Eleanor Holmes Norton are seeking to make the protections permanent for the millions of current and former federal employees affected.

Who should care: Cybersecurity · Privacy officers · Administrators

AI policy needed for schools

A local outlet is calling for AI policy in schools, signaling growing pressure on educational institutions to establish formal guidelines around artificial intelligence use.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

GoDaddy 2025 Global Stakeholder Impact Report: Responsible Governance & Operations | Cybersecurity & Data Privacy

GoDaddy has released its 2025 Global Stakeholder Impact Report, with a section focused on cybersecurity and data privacy practices under its responsible governance framework. The report appears to be a voluntary disclosure meant to communicate the company's approach to data protection and operational accountability.

Who should care: General readers · Privacy officers · Policy

Your product roadmap needs a 2026 privacy strategy now

A DevPro Journal piece argues that product teams should be building their 2026 privacy strategy into their roadmaps now rather than treating compliance as a last-minute obligation.

Who should care: General readers · Privacy officers · Policy

SAFR and Anava Enable Edge-Based Facial Recognition on Axis Cameras

SAFR and Anava have partnered to run facial recognition software directly on Axis network cameras, processing biometric data at the device level rather than sending footage to a central server. The integration allows facial recognition to operate with reduced latency and without a cloud dependency.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

EFF — Deeplinks · Aug 04, 2026 · International

Technology's Power in the Hands of the People

The Electronic Frontier Foundation is attending the summer security conference week in Las Vegas — BSides, Black Hat, and DEF CON 34 — and is using the occasion to solicit member support for its ongoing legal and advocacy work on privacy and free expression.

Who should care: General readers · Privacy officers · Policy