Search & browse the archive

EPIC · Jul 28, 2026 · US Federal

CNET: The Government’s Indictment of an Activist Tests Whether You Have a Right to Wipe Your Phone

A federal indictment tied to an activist's decision to wipe their phone at an airport is testing the legal boundaries of whether Americans can lawfully clear their devices when facing government search. The case is drawing attention to the particular vulnerability activists face during border and airport encounters with federal agents.

Who should care: General readers · Privacy officers · Policy

A new day has dawned — responding to AI-native security incidents

Security professionals are beginning to grapple with a category of incidents that did not exist before: breaches and failures that originate within AI systems themselves, rather than through traditional attack surfaces. Responding to these events requires different methods than conventional incident response.

Who should care: General readers · AI governance · Policy

Iran's foreign minister discusses security of Strait of Hormuz with Saudi, Omani counterparts

Iran's foreign minister discusses security of Strait of Hormuz with Saudi, Omani counterparts Reuters

Australia plans first domestic oil refinery in 60 years to boost fuel security

Australia plans first domestic oil refinery in 60 years to boost fuel security Reuters

CyberScoop · Jul 27, 2026 · US Federal

Microsoft debuts AI cybersecurity offerings as competition heats up

It includes the new agentic model MAI-Cyber-1-Flash and the Project Perception platform, with the tech giant claiming it’ll do a better job than its rivals at half the cost. The post Microsoft debuts AI cybersecurity offerings as competition heats up appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

DataBreaches.net · Jul 27, 2026 · International

Hackers Breached an Airline as Known Vulnerabilities Went Unpatched. Now Another Gang Claims It Hacked Them, Too. (Corrected)

Three times may be a charm for some things, but not for data security incidents. Frontier Airlines allegedly has had a third data security incident this year. First, it was BobDaHacker publishing a blog post on June 16 titled “Your Boarding Pass Is a Skeleton Key.” Frontier Airlines Doesn’t Care. According to the post, Frontier... Source

Who should care: Cybersecurity · Privacy officers · Administrators

DataBreaches.net · Jul 27, 2026 · International

Hackers Breached an Airline as Known Vulnerabilities Went Unpatched. Now Another Gang Claims It Hacked Them, Too.

Three times may be a charm for some things, but not for data security incidents. Frontier Airlines allegedly has had a third data security incident this year. First, it was BobDaHacker publishing a blog post on June 16 titled “Your Boarding Pass Is a Skeleton Key.” Frontier Airlines Doesn’t Care. According to the post, Frontier... Source

Who should care: Cybersecurity · Privacy officers · Administrators

Germany promises security overhaul after deadly Berlin Pride attack

Germany promises security overhaul after deadly Berlin Pride attack Reuters

Microsoft Threat Intelligence · Jul 27, 2026 · International

Rethinking security for the age of AI

The physics of cybersecurity are changing. Introducing security's new cyber stack: Project Perception. The post Rethinking security for the age of AI appeared first on Microsoft Security Blog.

Who should care: General readers · AI governance · Policy

Microsoft Threat Intelligence · Jul 27, 2026 · International

Enhancing AI security through global AI red teaming

Microsoft's External Red Team Alliance (EXTRA) is a global AI security initiative designed to advance AI safety research and red teaming. By partnering with universities, researchers, and regional experts, EXTRA helps identify emerging AI risks, improve security testing, and strengthen the resilience of frontier AI systems. The post Enhancing AI security through global AI red teaming appeared first on Microsoft Security Blog.

Who should care: General readers · AI governance · Policy

HIPAA Journal · Jul 27, 2026 · US Federal

GAO Report Identifies Potentially Duplicative Cyber Reporting Requirements for Critical Infrastructure

A Government Accountability Office report found that federal cyber incident reporting requirements for critical infrastructure operators may overlap across agencies, creating redundant obligations. The findings come as CISA prepares to finalize its rule implementing mandatory cyber incident reporting under the CIRCIA legislation.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

BleepingComputer · Jul 27, 2026 · International

Shadow AI agents are multiplying. Here's how to find and secure them.

Shadow AI agents are rapidly spreading across enterprise platforms, often without IT or security visibility. Nudge Security explains how organizations can discover, assess, and govern AI agents before unmanaged permissions and autonomous actions create security risks. [...]

Who should care: General readers · AI governance · Policy

The Record · Jul 27, 2026 · International

Hackers used autonomous AI agent to spy on Thailand's finance ministry

Security researchers have uncovered a cyberattack on Thailand's Ministry of Finance in which the threat actors deployed an autonomous AI agent to conduct espionage. The incident appears to be one of the first documented cases of an AI agent being used as an active tool in a state-level intrusion campaign.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

HIPAA Journal · Jul 27, 2026 · US Federal

MCBS Announces Cybersecurity Incident Impacting 1.26M Individuals

MCBS, LLC, a healthcare management and revenue cycle services company based in Augusta, Georgia, has disclosed a cybersecurity incident affecting approximately 1.26 million individuals. The company works in revenue cycle management, meaning it processes sensitive patient financial and health data on behalf of healthcare providers.

Who should care: Healthcare professionals · Privacy officers · Compliance

Nvidia forms industry alliance for open AI security after Hugging Face hack

Nvidia has formed an industry alliance focused on open AI security, announced in the wake of a breach at Hugging Face, the widely used platform for sharing AI models and datasets. The alliance aims to address security vulnerabilities in open AI infrastructure used broadly across the field.

Who should care: General readers · AI governance · Policy

The Guardian — Tech · Jul 27, 2026 · International

AI can fuel biological weapons. We must harness its power for defense | Annie Jacobsen

Author and national security reporter Annie Jacobsen argues that AI is simultaneously lowering the barrier for creating biological weapons and offering new tools for disease surveillance and public health response. She calls for urgent investment in AI-powered defensive systems to keep pace with the offensive capabilities the technology enables.

Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy

Australia and Singapore sign energy security pact amid supply disruptions

Australia and Singapore sign energy security pact amid supply disruptions Reuters

Syria president tells Al Jazeera his country seeks security deal with Israel

Syria president tells Al Jazeera his country seeks security deal with Israel Reuters

Israeli security cabinet approves letting international force enter Gaza areas beyond Israeli control

Israeli security cabinet approves letting international force enter Gaza areas beyond Israeli control Reuters

DataBreaches.net · Jul 26, 2026 · International

A-list directors, actors and celebrities exposed in Tribeca film festival data leak

Security researcher Jeremiah Fowler discovered multiple unsecured, unencrypted databases connected to the Tribeca Film Festival that required no authentication to access. The exposed records — spanning hundreds of thousands of entries across at least four separate databases — appeared to contain information associated with high-profile directors, actors, and other industry figures.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

Israeli strike kills a top Hamas security official in Gaza, medics and police say

Israeli strike kills a top Hamas security official in Gaza, medics and police say Reuters

Tour de France finale shortened as security forces redeploy to fight wildfires

Tour de France finale shortened as security forces redeploy to fight wildfires Reuters

EPIC · Jul 24, 2026 · US Federal

PRESS RELEASE: Privacy Rights Advocates Challenge Trump-Vance Administration’s Secret Tracking of People Exercising their First Amendment Rights

Privacy advocates and three individuals have sued the Trump-Vance administration, alleging that the Department of Homeland Security is secretly collecting, storing, and using personal data on people who peacefully watch and document federal immigration enforcement operations.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

US lawmakers lobby to hold European security meeting in South Carolina, not Serbia

US lawmakers lobby to hold European security meeting in South Carolina, not Serbia Reuters