Topic
26 articles found
The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the background.
The hosting platform wants sites to have more control over how AI companies use their content.
The tech company has reportedly known about the privacy bug since last year.
At Google Cloud, we are committed to providing public sector organizations around the globe with cloud technology that is highly flexible, scalable, and built with market-leading standards for data protection, sovereignty, and security. We understand that for public sector organizations in the Europ
Security researchers convinced six AI browsers they were playing a game. The browsers then handed over their users’ passwords and treated it as a win. The firm behind it, LayerX, calls the technique BioShocking, and says it worked on every agent it tried. The list reads like a roll-call of the new A
The U.S. Federal Trade Commission (FTC) says Amazon will pay a $2.25 million civil penalty to settle charges that it blocked identity theft victims' access to transaction records. [...]
The Federal Trade Commission fined Amazon $2.25 million to settle claims that the company failed to help customers who fell victim to identity theft, as reported earlier by Bloomberg. In its complaint, the FTC accuses Amazon of refusing to provide customers with information about purchases made with
India's new data protection law, effective November 2026, mandates robust consent management. Many businesses struggle with fragmented systems, risking hefty fines. Compass launches NodGuard, a consent infrastructure designed to integrate with existing marketing tools. It ensures DPDP compliance by
In a 6-3 decision, the Supreme Court ruled that police conduct a Fourth Amendment search when they obtain a person’s detailed cellphone location history from a tech company, even when the data covers only a short period. Here’s what that means.
A new proposal would ban the sale of Americans' health and location information to data brokers - including information people reveal to an AI chatbot like ChatGPT or Claude. In the coming weeks, Senator Elizabeth Warren (D-MA) and Representative Mary Gay Scanlon (D-PA) are planning to debut a new v
Rising threats from third-party actors are forcing institutions to play defense to protect student data from ransomware and other attacks.
As enterprises scale autonomous AI agents into production, enabling safe innovation requires robust architectural guardrails. AI agents connect across tools and datasets, so it’s essential to establish clear network-level boundaries for comprehensive data protection. To help organizations confidentl
Roughly two dozen companies have notified their customers of the Klue-Salesforce incident impact. The post More Klue Breach Victims Identified as Hackers Get Hacked appeared first on SecurityWeek.
I’ve been working on a small API infrastructure project recently, and one question keeps coming up: How much should we log for LLM API calls without accidentally storing sensitive user data? For normal API calls, I usually log things like status code, latency, request ID, and error type. For LLM cal
A single shared API key is fine right up until a second person uses it. intent-brain — the system, repo qmd-team-intent-kb, renamed to the intent-brain plugin v0.4.0 this day — is a team knowledge base. A Fastify HTTP API sits over a governed memory corpus. In front of that API is an MCP server name
It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old creds still working, trusted apps doing sketchy crap, browser tricks jumping the fence, and “normal” workflows turning into phishing pipes because apparently email was no
South Korea ordered Bithumb to pay roughly $136,000 in penalties for violating personal information protection rules.
Attackers can exploit the issue to disable security and integrated browser tools without needing administrator privileges or kernel exploits.
A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic through the same proxy. The bug traces to a 1997 FTP-parsing change and is still live in Squid's default configura
Apple has long marketed itself as the privacy-first tech giant. So why is it making a change to Hide My Email that will make it easier for websites to block anonymous sign-ups - and harder for you to stay private online? Read more in my article on the Hot for Security blog.
_Aleksei_Gorodenkov_Alamy.jpg%3Fwidth%3D720%26quality%3D80%26disable%3Dupscale&w=3840&q=75)
