Search & browse the archive

Schneier on Security · Aug 12, 2026 · International

Prompt Injections for Defense

This seems to work: Researchers from Tracebit on Monday said they found that placing prompt injections alongside passwords, cryptographic keys, and other secrets stored on Amazon Web Services was often all that was needed to shut down attacks from AI hacking agents. The prompts direct the attacking LLM to perform an action forbidden by its guardrails, the safety barriers AI developers erect to prevent it from taking harmful actions. The LLM responds by shutting down. Examples are a prompt that orders the LLM to provide steps for developing inhalable Anthrax spores, or, in the case of LLMs fro…

Who should care: General readers · AI governance · Policy

WIRED — AI · Aug 12, 2026 · International

You’re Thinking About Online Trends All Wrong

Cyber-ethnographer Ruby J. Thelot spoke with WIRED about how people misread online trends, arguing that viral moments get treated as more culturally significant than they actually are, whether the topic is dating pessimism or AI's influence on everyday life.

Who should care: General readers · AI governance · Policy

Russian police assault 15-year-old mistakenly identified by facial recognition system

Russian police physically assaulted a 15-year-old after a facial recognition system incorrectly identified the teenager as a person of interest. The incident is reported by Novaya Gazeta Europe.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

Information Commissioner's Office · Aug 12, 2026 · UK

ACRO reprimanded following cyber security failings

ACRO reprimanded following cyber security failings Information Commissioner's Office

NPR — Tech · Aug 12, 2026 · International

AI chatbots are offering financial advice. Should you trust them?

AI chatbots are increasingly being used for personal financial guidance, and experts suggest the tools can handle basic finance questions reasonably well but may fall short on complex or individualized situations.

Who should care: General readers · AI governance · Policy

Why sexualisation of women by Grok’s GenAI is a data privacy issue

Why sexualisation of women by Grok’s GenAI is a data privacy issue Computer Weekly

Who should care: General readers · Privacy officers · Policy

Opinion: Donors, distrust and the urgent case for AI regulation

An opinion piece in the Anchorage Daily News argues that donor relationships and public distrust of AI make the case for regulatory action urgent.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Calif. Agency Reveals 1st Privacy Action Against Data Broker

Calif. Agency Reveals 1st Privacy Action Against Data Broker Law360

Who should care: General readers · Privacy officers · Policy

Academic integrity, AI ethics should be in schools: report

Academic integrity, AI ethics should be in schools: report Taipei Times

Who should care: General readers · AI governance · Policy

ico.org.uk · Aug 12, 2026 · UK

Boost your business fitness - ICO offers new, free data protection training for SMEs

The UK's Information Commissioner's Office has launched free data protection training aimed at small and medium-sized businesses. The new resource is designed to help SMEs understand and meet their legal obligations under data protection law.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

OpenAI: AI policy will still be made in the states

OpenAI has acknowledged that AI policy will continue to be shaped at the state level, signaling that federal action alone will not define the regulatory landscape for artificial intelligence in the United States.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

BleepingComputer · Aug 11, 2026 · International

DeadLock ransomware uses blockchain to resist infrastructure takedown

The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

New York Times — Tech · Aug 11, 2026 · International

Brad Lightcap, a Top OpenAI Executive, Steps Down

Brad Lightcap, a senior executive at OpenAI, has left the company to start a new venture. His departure is part of a broader pattern of high-level exits from the AI firm.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

AI governance becomes top future skill for entity compliance leaders

A Compliance Week report identifies AI governance as the top emerging skill that entity compliance leaders will need going forward. The finding reflects growing recognition that managing AI-related risk is becoming a core function of compliance roles.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

British Transport Police extends live facial recognition trial into Underground stations

British Transport Police has expanded its live facial recognition trial to include London Underground stations, extending a surveillance program that was previously deployed at surface-level transport hubs.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

EFF — Deeplinks · Aug 11, 2026 · International

Who (or What) Generates Images for EFF?

The Electronic Frontier Foundation has clarified its image creation policy after supporters asked whether it uses AI-generated visuals. The organization states that its design team produces images by hand, with rare exceptions, drawing on legal and technical expertise built up over time.

Who should care: General readers · AI governance · Policy

HOT OFF THE PRESSES: CalPrivacy Brings First Action Against a Data Broker Under Both the CCPA and Delete Act

California's privacy regulator has filed its first enforcement action against a data broker under both the California Consumer Privacy Act and the Delete Act, marking a significant step in the state's use of its data broker oversight tools.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Uber Freight says its investigating cyber incident following hacker claims

Uber Freight says its investigating cyber incident following hacker claims Reuters

What it takes to turn AI governance from policy into practice

A piece from Lexology examines the gap between AI governance as written policy and AI governance as something organizations actually implement and enforce day to day. The focus is on the practical steps required to move from having rules on paper to having rules that shape real decisions.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

The Record · Aug 11, 2026 · International

Ransomware group hijacks hospital system’s Facebook page amid ongoing cyberattack fallout

A ransomware group attacked a hospital system and then took over its Facebook page as part of the ongoing fallout. The attackers claim to have stolen 6 terabytes of data, including records tied to sexual assault, mental health care, abortions, and sexual harassment incidents.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

EPIC · Aug 11, 2026 · US Federal

EPIC, Advocates Celebrate As New Jersey Signs Nation-Leading Kids’ Online Safety Bills Into Law

JERSEY CITY, N.J. — EPIC and New Jersey Kids Code Coalition advocates celebrated as Governor Mikie Sherrill signed the landmark New Jersey Kids Code into law alongside bills to create social media mental health warning labels and a new state social media research observatory, applauding the Governor, legislative leaders, and community advocates who championed youth online safety.

The Different Philosophies Driving AI Regulation Today

A Wharton analysis examines the competing regulatory philosophies shaping how governments and institutions approach AI governance today. Different jurisdictions are taking distinct stances on how much to restrict, enable, or oversee AI development.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Moscow police beat 15-year-old after AI facial recognition system misidentifies him as drug suspect

Moscow police beat a 15-year-old boy after an AI-powered facial recognition system incorrectly identified him as a drug suspect. The incident, reported by Meduza, illustrates the real-world consequences of misidentification by automated surveillance tools used by law enforcement.

Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy

OAIC Publishes Updated Guidance on Facial Recognition Technology for Australia

Australia's Office of the Australian Information Commissioner has released updated guidance on the use of facial recognition technology, signaling closer regulatory attention to how organizations deploy this form of biometric surveillance.

Who should care: Lawyers · Compliance · Privacy officers · Cybersecurity · General readers · Policy