The full corpus — beyond today's front page.
9041 results · page 2 of 377
The European Data Protection Board has selected automated decision-making and profiling in recruitment as the focus of its 2025 Coordinated Enforcement Framework, directing national data protection authorities across the EU to investigate how employers use algorithmic tools to screen and evaluate job candidates.
Who should care: Lawyers · Privacy officers · Compliance · AI governance
West Bengal is planning to roll out a facial recognition system in schools to automate student attendance tracking. The AI-powered system would scan and identify students' faces as a substitute for traditional attendance methods.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
Radical Numerics has developed a model that it says can identify natural and AI-engineered pathogens without an internet connection.
Who should care: General readers · AI governance · Policy
Binance hack reveals crypto's uphill battle against hackers Reuters
Microsoft FORGE Lab researchers used codename MDASH to investigate Linux kernel vulnerabilities, resulting in 59 upstream bug reports, 33 assigned CVEs, and 38 merged fixes. The research includes eight demonstrated local root privilege-escalation exploits and examines the challenges of turning AI-generated findings into validated vulnerabilities and upstream fixes. The post Lessons from 59 Linux Kernel Bug Reports appeared first on Microsoft Security Blog.
Who should care: General readers · AI governance · Policy
The UK's Information Commissioner's Office has addressed the use of artificial intelligence to generate subject access requests, the formal mechanism individuals use to obtain copies of personal data held about them.
Who should care: Lawyers · Privacy officers · AI governance · Administrators · General readers · Policy
Scottish police pilot BriefCam video analytics as lawmakers resist LFR legislation Biometric Update
Who should care: Privacy officers · Cybersecurity · General readers · Policy
A new analysis from The Health Management Academy examines how cyberattacks on U.S. hospitals affect patient care, offering data on the real-world consequences of health sector breaches.
Who should care: Healthcare professionals · Privacy officers · Compliance
Compliant and still blind: What Article 72 monitoring doesn't see IAPP
Spanish watchdog opens TikTok probe but denies government demand to block app Reuters
“It has left a sour taste in my mouth,” says a Heated Rivalry fanfic author who found her work uploaded to AO3 mirror sites without her consent.
Who should care: General readers · Privacy officers · Policy
China’s use of sexpionage is a well-established intelligence tactic with recent, high-profile examples. So how did the world’s most powerful AI executive fall for it?
Who should care: General readers · AI governance · Policy
Garrett Cole reports: Toronto’s York University has confirmed a major cybersecurity incident that resulted in the unauthorized theft of sensitive personal, medical, and financial records submitted across departmental webforms over a 19-year span. Disclosed to community members following forensic containment, the breach allowed an unauthorized actor to exfiltrate archived form submissions dating from 2007 through...
Who should care: Cybersecurity · Privacy officers · Administrators
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments. [...]
Who should care: General readers · AI governance · Policy
It’s been a while since hotel and resort giant Wyndham has shown up on DataBreaches.net. There was one report in 2024, but prior extensive coverage involved their historic litigation with the FTC following a breach. Now Zack Whittaker reports: Hotel and resort giant Wyndham has acknowledged a cybersecurity incident after a good-faith security researcher discovered...
Who should care: Cybersecurity · Privacy officers · Administrators
A Defining Moment for the United Nations and the Future of AI Tech Policy Press
Who should care: General readers · AI governance · Policy
Security researchers found that more than 35,000 apps built on xAI's Grok platform were publicly accessible without restriction, exposing corporate data and personal information. The finding came after researchers scanned tens of thousands of web addresses tied to the grok.me domain.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy
A 2013 data breach of YouHack, a Russian-language cybercrime forum, has been newly cataloged by Have I Been Pwned, exposing 7.2 million unique email addresses. The dataset includes login credentials of roughly 107,000 forum members as well as millions of stolen credentials they had collected from other victims.
Who should care: Cybersecurity · Privacy officers · Administrators
Rhea Yasmine reports: A server supporting Fullerton Health’s Migrant Worker Primary Care Plan (PCP) programme was hit by a cybersecurity incident, said the healthcare service provider. In a statement on its website on Nov 9, it said the incident, which involved unauthorised access to the server, appears to have affected migrant workers’ personal data. This...
Who should care: General readers · Privacy officers · Policy
A cyberattack on AllUnited, a membership administration platform used by Dutch sports clubs, has triggered data breach reports from more than 350 clubs to the Dutch Data Protection Authority, with that number expected to climb. Personal information belonging to club members may have been exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · General readers · Policy
UA News reports: Slovak cybersecurity company ESET said that servers of a Romanian government institution were compromised in December 2025. The malware selected emails related to NATO and the European Union and created copies of them for later retrieval by the attackers. Defense News reported the attack. ESET linked the Cereal toolset to the Turla...
Who should care: Cybersecurity · Privacy officers · Administrators
A Nebraska man was jailed for two weeks after an AI facial recognition system misidentified him, according to reporting by The Economic Times. The case is being cited as a Fourth Amendment violation tied to the use of flawed AI-driven identification.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
New figures reveal how many arrests were made using live facial recognition technology over the course of a single year, offering a rare concrete look at how often the surveillance tool is translating scans into police action.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
Russian diplomat says Moscow could conclude non-aggression pacts with NATO member states Reuters