The full corpus — beyond today's front page.
6227 results · page 68 of 260
After Air Force Major Alex Klinner died in a KC-135 crash during operations against Iran, his widow Libby faced difficulties obtaining certain combat-related benefits. Vice President Vance has pledged to intervene following public attention to her situation.
Who should care: Cybersecurity · Privacy officers · Administrators
It won’t work: My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which they interact. An off-the-shelf VM is not enough to contain a modern, cyber-capable AI agent. There is simply too much attack surface. Even innocuous features (like running with a display) add extra, exploitable attack surface.
Who should care: General readers · AI governance · Policy
AI Score, a UK-based platform focused on AI governance intelligence, has closed a $5.4 million seed funding round. The raise signals continued investor appetite for tools that help organizations assess and manage AI-related risk.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
US seeks to address security concerns before Trump envoys visit Moscow and Kyiv, source says Reuters
A Maui County Council committee has moved forward a bill on license plate readers while holding off on a separate measure dealing with facial recognition technology. The two proposals appear to be advancing on separate tracks.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
A provocative argument is circulating that the philosophical debate over AI consciousness may be beside the point — that AI systems are already behaving in ways that complicate clean distinctions between tool and something more.
Who should care: General readers · AI governance · Policy
Large U.S. companies, including AT&T, are shifting toward open-source AI models as a lower-cost alternative to proprietary systems from vendors like Anthropic and OpenAI. The trend points to growing corporate appetite for AI that does not depend on expensive commercial providers.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
US and allies want IAEA board to report Iran to UN Security Council, diplomats say reuters.com
A view from DC: Getting to yes on safe social media for teens IAPP
Russia's drone attack hits Ukraine's SBU headquarters, Zelenskiy says reuters.com
Security researchers have identified 39 distinct methods attackers can use to compromise passkey-based authentication systems. The techniques do not break the underlying FIDO2 cryptography but instead target surrounding processes like credential syncing, enrollment flows, account recovery, and how authentication prompts are handled.
Who should care: Cybersecurity · Privacy officers · Administrators
New research finds that data privacy is the top priority among CFOs, while artificial intelligence ranks sixth but is climbing the list of concerns.
Who should care: General readers · AI governance · Policy · Privacy officers
Russia is requiring data centers to strengthen physical security as Ukrainian drone strikes increasingly threaten the regions where that infrastructure is concentrated. The Kremlin is responding to a real geographic vulnerability in its domestic data infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators
Russia hits Ukraine's security service headquarters in Kyiv, Zelenskiy says reuters.com
A new survey found that patients want transparency about when and how artificial intelligence is used in their healthcare, including by doctors' offices and other medical providers. The findings point to a clear gap between how AI is being adopted in clinical settings and what patients expect to know about it.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
Notes from the IAPP Canada: Federal Court to weigh in on de-listing debate IAPP
US military officials have disabled advertising trackers on troops' phones and computers following reports that commercially available location data was used to track American forces in the Middle East. Senator Ron Wyden released correspondence from the armed forces confirming the move.
Who should care: General readers · Privacy officers · Policy
DaVita, a national kidney dialysis company, has agreed to a $15 million class action settlement following a 2025 ransomware attack that exposed patient data, much of which was subsequently leaked on the dark web.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
SonicWall has disclosed two zero-day vulnerabilities in its SMA1000 remote access appliances that attackers are actively chaining together to execute arbitrary code remotely. The flaws are already being exploited in the wild, meaning patches or mitigations are urgent rather than routine.
Who should care: Healthcare professionals · Privacy officers · Compliance
Medscape has published a guide outlining five key points physicians should understand about the current regulatory landscape for artificial intelligence used in medical settings.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
Bidding war for defunct Spirit Airlines’ employee data will not die csoonline.com
Ledger, the hardware cryptocurrency wallet company, is facing a $500 million class action lawsuit filed by a customer who alleges the company failed to adequately protect user data and did not take meaningful corrective steps after prior breaches.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A dark web service called Nexus began offering searchable access to more than 153 million scanned driver's licenses from the US and Canada, with IDScan.net suspected as the source of the breach. The FBI's New Orleans field office opened a formal investigation on the same day the service appeared.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Turkey's data protection authority fined restaurant chain Baydöner after a breach exposed the personal data of over 500,000 customers, including names, phone numbers, email addresses, and location information. The investigation found the company had no system in place to detect unusual activity before the theft occurred.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy