Search & browse the archive

Four US Republicans call for Trump to release Taiwan security funds

Four US Republicans call for Trump to release Taiwan security funds Reuters

WIRED — AI · Sep 23, 2026 · International

Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers.

Who should care: General readers · AI governance · Policy

Just Security · Sep 23, 2026 · US Federal

With Muse, Meta Could Have the Power to Decide What Matters in Your Life

Meta has introduced Muse, a 24/7 AI assistant designed to operate continuously in users' lives. Analysts and critics are examining what that persistent presence means for personal autonomy and how Meta handles the data such a system would collect.

Who should care: General readers · AI governance · Policy · Privacy officers

Pakistan tightens security ahead of march planned by Imran Khan's party

Pakistan tightens security ahead of march planned by Imran Khan's party Reuters

The Guardian — Tech · Sep 23, 2026 · International

New UK agency to fight ‘information warfare’ from likes of Russia, Burnham tells UN

The UK government is establishing a National Centre for Information Defence to detect and counter foreign disinformation and AI-generated deepfakes, particularly from hostile states such as Russia. The centre will bring together intelligence agencies, law enforcement, and social media companies.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

EPIC · Sep 22, 2026 · US Federal

WBUR: Is your driver’s license on the dark web?

A WBUR segment examined the risk posed by breaches involving driver's license images and identity document data, with a security expert noting that this category of exposure is meaningfully more dangerous than typical data breaches due to the forensic-level detail captured.

Who should care: Cybersecurity · Privacy officers · Administrators

BleepingComputer · Sep 22, 2026 · International

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Sweden's data protection authority IMY fined IT systems provider Miljödata approximately $183,000 after a security breach in August 2025 exposed data belonging to 2.2 million people. The regulator found the company's security measures were inadequate.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy

Explainer-What is in the US-Greenland-Denmark security deal? By Reuters

Explainer-What is in the US-Greenland-Denmark security deal? By Reuters Investing.com

What is in the US-Greenland-Denmark security deal?

What is in the US-Greenland-Denmark security deal? Reuters

Nextgov/FCW · Sep 22, 2026 · US Federal

ShinyHunters claims FBI data theft, demands bureau retract cyber warning

Hacking group ShinyHunters claims to have stolen sensitive FBI employee and applicant records, and is demanding the bureau walk back a cybersecurity warning. The full extent of the alleged breach has not been independently confirmed.

Who should care: Cybersecurity · Privacy officers · Administrators

Trump signs US-Denmark-Greenland agreement to bolster Arctic security after prolonged tensions

Trump signs US-Denmark-Greenland agreement to bolster Arctic security after prolonged tensions apnews.com

CyberScoop · Sep 22, 2026 · US Federal

Citing China, President Trump doubles down on hands-off approach to AI regulation

President Trump is reinforcing his administration's position against AI regulation, citing competition with China as the primary justification. This comes despite recent security incidents involving agentic AI systems.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Microsoft Threat Intelligence · Sep 22, 2026 · International

Unmasking EvilTokens: Getting to the root of device code phishing

EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disruption of EvilTokens infrastructure and operations. The post Unmasking EvilTokens: Getting to the root of device code phishing appeared first on Microsoft Security Blog.

Who should care: General readers · AI governance · Policy

France mulls new UN Security Council resolution on Hormuz, diplomats say

France mulls new UN Security Council resolution on Hormuz, diplomats say Reuters

EDPB · Sep 22, 2026 · EU

The Spanish DPA fines Securitas Direct EUR 100 000 for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Spain's data protection authority fined Securitas Direct €100,000 after the security company directed people to a paid-rate phone number to exercise their data access and objection rights. The case began with a complaint from a consumer association over video surveillance notices that made using those rights more expensive than they should be.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

EDPB · Sep 22, 2026 · EU

The Spanish DPA fined Securitas Direct EUR 100 000 for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Spain's data protection authority fined Securitas Direct €100,000 after finding the security company routed people trying to exercise their data rights to a premium-rate phone number. The case was triggered by a consumer association complaint about video surveillance notices that made access and objection requests costly.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

EDPB · Sep 22, 2026 · EU

The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Spain's data protection authority fined Securitas Direct €100,000 after the security company directed people to a paid-rate phone number to exercise their GDPR rights. A consumer association brought the complaint, citing video surveillance notices that routed access and objection requests through a chargeable 902 number.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

DeepSeek to brief UN Security Council on AI risks this week, Reuters reports

DeepSeek, the Chinese AI company, is set to brief the United Nations Security Council on artificial intelligence risks, according to a Reuters report. The briefing marks a notable moment of direct AI industry engagement with one of the world's most powerful intergovernmental bodies.

Who should care: General readers · AI governance · Policy

Kremlin says UN Security Council should add new permanent members, keep veto power that Erdogan urged scrapping

Kremlin says UN Security Council should add new permanent members, keep veto power that Erdogan urged scrapping Reuters

HIPAA Journal · Sep 22, 2026 · US Federal

What a Healthcare Compliance Attorney Heard at the OCR’s HIPAA Security Conference

A healthcare compliance attorney attended a two-day HIPAA Security Conference hosted by the Office for Civil Rights at the NIST campus in Gaithersburg, sharing observations from the event. The conference brought together regulators and compliance professionals to discuss healthcare data security requirements.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

As resistance mounts, Trump reaches for a familiar shield: national security

As resistance mounts, Trump reaches for a familiar shield: national security Reuters

EXCLUSIVE: DeepSeek to brief UN Security Council on AI this week, sources say

DeepSeek, the Chinese AI company, is set to brief the UN Security Council on artificial intelligence this week, according to sources. The appearance would mark a notable moment of direct engagement between a major AI developer and the world's primary international security body.

Who should care: General readers · AI governance · Policy

New York Times — Tech · Sep 22, 2026 · International

What to Know About Recent A.I. Hacks

OpenAI, Google, and other AI companies have recently disclosed security breaches involving their own AI models, adding to growing concern about the risks that come with more capable AI systems.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Automated License Plate Readers raise Data Privacy concerns as Networks grow

Automated license plate reader networks are expanding, and that growth is drawing increased scrutiny over how the location data they collect is stored, shared, and used. The technology can track vehicle movements across wide areas, often without drivers knowing they are being recorded.

Who should care: Privacy officers · Cybersecurity · General readers · Policy