Search & browse the archive

War on the Rocks · Nov 03, 2026 · International

Humanity’s Promethean Gap with AI

Frontier AI systems are beginning to test the limits of human oversight, while the companies developing them retain considerable power to define the risks and the terms of their scrutiny. In security and defense, the stakes are particularly high. The industry’s new calls to pace the frontier also risk becoming performative restraint, and defense establishments should act before agentic swarm systems enter chains of command.The OpenAI/Hugging Face incident provides a clear illustration of the emerging governance problem. Several reports in August from OpenAI, METR, and Redwood Research found t…

Who should care: General readers · AI governance · Policy

Godrej bets on facial recognition to scale growth in home security market

Indian conglomerate Godrej is positioning facial recognition technology as a core part of its strategy to expand in the home security market.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

AvePoint Launches Trust Platform to Strengthen AI Governance, Security, and Cost Optimization

AvePoint has announced a new product called the Trust Platform, positioning it as a tool to help organizations manage AI governance, security, and cost efficiency in one place.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

OpenAI taps former US army secretary Dan Driscoll for national security role

OpenAI taps former US army secretary Dan Driscoll for national security role Reuters

The Guardian — Tech · Nov 03, 2026 · International

AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028

The UK's National Cyber Security Centre has assessed it as highly likely that AI-powered malware will be used to attack critical national infrastructure — including power stations, airports, and hospitals — before 2028, with ransomware seen as a probable vector.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

DataBreaches.net · Nov 02, 2026 · International

KR: HYBE data breach exposes employee medical records, financial details

HYBE, the South Korean entertainment company known for managing BTS, disclosed a cyberattack that exposed sensitive personal data of employees and business partners, including resident registration numbers, credit card details, and medical records. The breach was discovered during an internal security review.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy

The Record · Nov 02, 2026 · International

Michigan State cyber incident claimed by ransomware gang behind recent hospital attack

A recent post by the BYOD gang appears to line up with a security incident that prompted campus-wide action at Michigan State University. BYOD drew attention in October for an attack on the University of New Mexico.

Who should care: Cybersecurity · Privacy officers · Administrators

Jets' Aaron Glenn not fretting job security

Jets' Aaron Glenn not fretting job security Reuters

Just Security · Nov 02, 2026 · US Federal

Questions for Congress: AI in Targeting and Civilian Protection

What Congress should ask Defense Department officials about its use of AI for targeting and the protections in place against civilian harm. The post Questions for Congress: AI in Targeting and Civilian Protection appeared first on Just Security.

Who should care: General readers · AI governance · Policy

Schneier on Security · Nov 02, 2026 · International

AI Vulnerability Finding

A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes. It is a new world out there.

Who should care: General readers · AI governance · Policy

Privacy Commissioner of Canada · Nov 02, 2026 · Canada

News release: Privacy Commissioner of Canada appears before Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-22

Canada's Privacy Commissioner appeared before the Senate Standing Committee on National Security, Defence and Veterans Affairs to testify on Bill C-22.

Who should care: General readers · Privacy officers · Policy

Privacy Commissioner of Canada · Nov 02, 2026 · Canada

Media advisory: Privacy Commissioner of Canada to appear before Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-22

Canada's Privacy Commissioner is scheduled to appear before the Standing Senate Committee on National Security, Defence and Veterans Affairs to address Bill C-22.

Who should care: General readers · Privacy officers · Policy

Binance says exit rush slowing down as users weigh security risk

Binance says exit rush slowing down as users weigh security risk Reuters

Indian authorities tighten security ahead of big opposition march in Delhi

Indian authorities tighten security ahead of big opposition march in Delhi Reuters

New York Times — Tech · Oct 31, 2026 · International

AO3 Fan Fiction Site Is Hacked and Could Be Offline for Weeks

Archive of Our Own, a large nonprofit fan fiction platform, was taken offline after a security intrusion. One of its founders said the site could remain down for several weeks while the incident is addressed.

Who should care: Cybersecurity · Privacy officers · Administrators

BleepingComputer · Oct 31, 2026 · International

Northflank security breach leads to abuse of customers' AI API keys

Cloud hosting platform Northflank disclosed a security breach that resulted in unauthorized use of customers' AI API keys, and is urging all customers to rotate their stored credentials and secrets.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

BleepingComputer · Oct 31, 2026 · International

From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.

AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical cybersecurity skills, use AI responsibly, and produce reproducible findings that stand up to scrutiny. [...]

Who should care: General readers · AI governance · Policy

Nextgov/FCW · Oct 30, 2026 · US Federal

Tech bills of the week: Creating a Congressional Office of Technology; Enhancing data center transparency; and more

A set of congressional bills introduced this week would establish a dedicated technology office for lawmakers, require greater transparency from data centers, address AI-enabled human trafficking, and tighten cybersecurity standards for cloud infrastructure.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

US orders non-emergency staff to leave Saudi Arabia over security risks

US orders non-emergency staff to leave Saudi Arabia over security risks Reuters

EPIC · Oct 30, 2026 · US Federal

EPIC and LULAC Ask Court to Halt DHS and DOJ’s Scheme to Weaponize Voter Data Ahead of Election Day

EPIC and the League of United Latin American Citizens (LULAC) filed a motion Thursday, October 29th, for a temporary restraining order to block the Department of Homeland Security (DHS) and the Department of Justice (DOJ) from transmitting data to states and localities about registered voters whom the agencies claim are "likely noncitizens."

The Record · Oct 30, 2026 · International

Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach

Florida's Department of Education disclosed a breach of its student financial aid website that exposed the Social Security numbers of approximately 4.9 million people. The agency said it learned of the incident on October 19.

Who should care: Cybersecurity · Privacy officers · Administrators

Tanker in Strait of Hormuz hit by limpet mines, security sources say

Tanker in Strait of Hormuz hit by limpet mines, security sources say Reuters

BleepingComputer · Oct 30, 2026 · International

SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone

Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit trust between networks and how its security-focused mobile service helps defend against them. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

Confronting What Lurks in the Shadows: AI Regulation and Governance

A piece in Infosecurity Magazine takes up the challenge of AI regulation and governance, framing the problem as one of hidden or poorly understood risks that current oversight frameworks have not fully addressed.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy