Tag: privacy

CCPA Compliance Checklist for 2026: What You Need to Know

Jan 9, 2026 1:01 PM

Tags: compliance, law, privacy

Key Takeaways The California Consumer Privacy Act (CCPA) is California’s primary privacy law governing how businesses collect, use, disclose, and protect personal information about California residents. Since its introduction, the law has steadily evolved, expanding both the rights granted to individuals and the expectations placed on organizations that handle personal data. The CCPA law gives……
ChatGPT Health: Top Privacy, Security, Governance Concerns

Jan 9, 2026 12:01 AM

Tags: chatgpt, governance, openai, privacy, tool

OpenAI: Tool Will ‘Securely’ Connect With Medical Records, But How Will That Work?. OpenAI is rolling out a new version of ChatGPT dedicated to health that the company said will also securely connect users’ medical records and wellness apps to better personalize responses. OpenAI says more than 230 million people each week ask ChatGPT wellness…
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
ChatGPT Health feature draws concern from privacy critics over sensitive medical data

Jan 8, 2026 8:02 PM

Tags: ai, chatgpt, data, intelligence, privacy

The artificial intelligence juggernaut in a blog post encouraged its hundreds of millions of users to connect medical records and wellness app data to the new health-focused chatbot feature, adding that it will be outfitted with extra data privacy protections. First seen on therecord.media Jump to article: therecord.media/chatgpt-health-draws-concern-privacy-critics
Zero-Knowledge Compliance: How Privacy-Preserving Verification Is Transforming Regulatory Technology

Jan 8, 2026 5:05 PM

Tags: breach, compliance, data, framework, law, privacy, risk, technology

Traditional compliance often forces companies to expose sensitive information to prove they follow the rules. This approach increases the risk of breaches and raises severe privacy concerns. With rising regulatory pressure and stricter data sovereignty laws, more organizations are exploring zero-knowledge frameworks as a safer alternative. Zero-knowledge proofs (ZKPs) allow businesses to prove adherence without..…
OpenAI says ChatGPT won’t use your health information to train its models

Jan 8, 2026 1:01 AM

Tags: chatgpt, openai, privacy

OpenAI is rolling out ChatGPT Health, which is a dedicated space for health conversations. Amidst privacy concerns, OpenAI said it won’t use your health data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-says-chatgpt-wont-use-your-health-information-to-train-its-models/
Critical macOS Flaw Lets Attackers Bypass Apple Privacy Controls Without Consent

Jan 7, 2026 6:01 PM

Tags: access, apple, control, data, flaw, macOS, privacy, vulnerability

A newly disclosed macOS vulnerability bypasses Apple’s TCC privacy controls, allowing silent access to files, microphone data, and user activity. The post Critical macOS Flaw Lets Attackers Bypass Apple Privacy Controls Without Consent appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-macos-flaw-apple-privacy-controls/
Court Demands OpenAI Hand Over 20M Anonymized ChatGPT Chats in AI Copyright Dispute

Jan 7, 2026 9:52 AM

Tags: ai, chatgpt, cyber, openai, privacy

A federal judge has ordered OpenAI to turn over 20 million anonymized ChatGPT conversation logs in a major copyright lawsuit, rejecting the company’s arguments that privacy concerns should limit the disclosure. District Judge Sidney H. Stein upheld a ruling by Magistrate Judge Ona T. Wang requiring OpenAI to produce records for news organization plaintiffs, including…
8 things CISOs can’t afford to get wrong in 2026

Jan 7, 2026 8:52 AM

Tags: access, advisory, ai, attack, automation, awareness, breach, business, ciso, cloud, communications, compliance, control, cyber, cyberattack, cybersecurity, data, data-breach, defense, dora, encryption, finance, firmware, GDPR, healthcare, identity, incident response, india, infrastructure, injection, insurance, intelligence, iot, jobs, law, malicious, monitoring, network, privacy, ransom, regulation, resilience, risk, saas, scam, service, software, strategy, supply-chain, tactics, technology, theft, threat, tool, training, update, vulnerability, zero-trust

“Identity and access controls for AI agents and AI platforms are one of the most important areas of concern for CISOs,” says Jason Stading, director at global technology research and advisory firm ISG. “Right now, permissions and access rights for AI are a black box in many areas. We will see a major push over…
NDSS 2025 Exploiting the Complexity Of Modern CSS For Email And Browser Fingerprinting

Jan 6, 2026 7:52 PM

Tags: attack, conference, container, defense, email, exploit, Hardware, Internet, mobile, network, privacy, service, spy

Session 8A: Email Security Authors, Creators & Presenters: Leon Trampert (CISPA Helmholtz Center for Information Security), Daniel Weber (CISPA Helmholtz Center for Information Security), Lukas Gerlach (CISPA Helmholtz Center for Information Security), Christian Rossow (CISPA Helmholtz Center for Information Security), Michael Schwarz (CISPA Helmholtz Center for Information Security) PAPER Cascading Spy Sheets: Exploiting the Complexity…
Privacy will be under unprecedented attack in 2026

Jan 6, 2026 6:52 PM

Tags: attack, encryption, privacy

The UK and Europe are ramping up opposition to encryption and stepping up surveillance of private communications. Here is what to expect this year First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366636751/Privacy-will-be-under-unprecedented-attack-in-2026
macOS Flaw Enables Silent Bypass of Apple Privacy Controls

Jan 6, 2026 4:52 PM

Tags: access, apple, control, flaw, macOS, privacy, vulnerability

A macOS vulnerability (CVE-2025-43530) allows attackers to silently bypass TCC privacy controls and access sensitive user data. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/macos-flaw-enables-silent-bypass-of-apple-privacy-controls/
Product showcase: Blokada for Android gives users control over network traffic

Jan 6, 2026 7:52 AM

Tags: android, control, macOS, network, privacy, windows

Blokada is a network privacy and ad-blocking application available on Android, iOS, Windows, macOS, and Linux. It is designed to reduce ads, block trackers, and limit unwanted … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/06/product-showcase-blokada-android-control-network-traffic/
The nation’s strictest privacy law just took effect, to data brokers’ chagrin

Jan 5, 2026 11:52 PM

Tags: data, law, privacy

Californians can now submit demands requiring 500 brokers to delete their data. First seen on arstechnica.com Jump to article: arstechnica.com/tech-policy/2026/01/data-broker-hoarding-is-rampant-new-law-lets-consumers-fight-back/
California’s DROP Program Changes Everything: How B2C Companies Can Eliminate Authentication Liabilities and Meet Global Privacy Compliance with MojoAuth

Jan 5, 2026 12:52 PM

Tags: authentication, compliance, privacy

California’s DROP Program Changes Everything First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/californias-drop-program-changes-everything-how-b2c-companies-can-eliminate-authentication-liabilities-and-meet-global-privacy-compliance-with-mojoauth/
California’s DROP Program Changes Everything: How B2C Companies Can Eliminate Authentication Liabilities and Meet Global Privacy Compliance with MojoAuth

Jan 5, 2026 12:52 PM

Tags: authentication, compliance, privacy

California’s DROP Program Changes Everything First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/californias-drop-program-changes-everything-how-b2c-companies-can-eliminate-authentication-liabilities-and-meet-global-privacy-compliance-with-mojoauth/
Disney Fined $10M for Violating Children’s Privacy Laws on YouTube

Jan 5, 2026 12:52 PM

Tags: data, finance, law, privacy

Disney agrees to a $10M settlement with the DOJ and FTC over YouTube privacy violations. Learn how the COPPA ruling affects kids’ data and Disney’s new rules. First seen on hackread.com Jump to article: hackread.com/disney-fine-violating-children-privacy-laws-youtube/
NDSS 2025 A New PPML Paradigm For Quantized Models

Jan 4, 2026 9:52 PM

Tags: blockchain, conference, data, framework, Internet, ml, network, privacy, strategy

Session 7D: ML Security Authors, Creators & Presenters: Tianpei Lu (The State Key Laboratory of Blockchain and Data Security, Zhejiang University), Bingsheng Zhang (The State Key Laboratory of Blockchain and Data Security, Zhejiang University), Xiaoyuan Zhang (The State Key Laboratory of Blockchain and Data Security, Zhejiang University), Kui Ren (The State Key Laboratory of Blockchain…
8 WhatsApp Features to Boost Your Security and Privacy

Jan 4, 2026 12:52 PM

Tags: privacy

Meta’s end-to-end encrypted messaging app is used by billions of people. Here’s how to make sure you’re one of the most locked-down ones out there. First seen on wired.com Jump to article: www.wired.com/story/5-features-that-boost-security-and-privacy-on-whatsapp/
Data Privacy vs Cybersecurity Solutions: Key Differences

Jan 3, 2026 8:52 PM

Tags: cybersecurity, data, privacy

The post <b>Data Privacy vs Cybersecurity Solutions: Key Differences</b> appeared first on Sovy. First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/01/data-privacy-vs-cybersecurity-solutions-key-differences/
Top 10 Cybersecurity Predictions for 2026

Jan 1, 2026 10:52 AM

Tags: access, ai, api, application-security, attack, authentication, automation, awareness, backdoor, backup, best-practice, blockchain, breach, business, ceo, china, ciso, cloud, communications, compliance, computer, computing, conference, control, corporate, crypto, cryptography, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, deep-fake, defense, detection, disinformation, email, encryption, espionage, exploit, extortion, finance, fraud, governance, government, group, hacker, hacking, healthcare, identity, incident response, infrastructure, intelligence, Internet, iran, korea, law, linkedin, LLM, malicious, malware, mfa, military, monitoring, msp, mssp, network, nist, north-korea, organized, phishing, privacy, programming, ransom, ransomware, regulation, risk, risk-management, russia, scam, service, skills, soc, social-engineering, software, strategy, supply-chain, tactics, technology, theft, threat, tool, training, ukraine, update, vulnerability, vulnerability-management, warfare, windows, zero-day

Top 10 Cybersecurity Predictions for 2026 The year AI changes cybersecurity forever Cybersecurity predictions are an opportunity to look forward instead of back, to be proactive instead of reactive, and to consider how changes in attackers, technology, and the security industry will impact the sustainability of managing cyber risks. Gaining future insights to the threats, targets,…
NDSS 2025 “¢ Decentralized Infrastructure For Sharing Trusted Encrypted Facts And Nothing More

Dec 31, 2025 10:52 PM

Tags: conference, data, framework, group, infrastructure, Internet, network, open-source, privacy

Session 7C: Secure Protocols Authors, Creators & Presenters: Sofia Celi (Brave Software), Alex Davidson (NOVA LINCS & Universidade NOVA de Lisboa), Hamed Haddadi (Imperial College London & Brave Software), GonÃ§alo Pestana (Hashmatter), Joe Rowell (Information Security Group, Royal Holloway, University of London) PAPER DiStefano: Decentralized Infrastructure for Sharing Trusted Encrypted Facts and Nothing More We…
NDSS 2025 Impact Tracing: Identifying The Culprit Of Misinformation In Encrypted Messaging Systems

Dec 31, 2025 10:52 PM

Tags: conference, Internet, network, privacy

Session 7C: Secure Protocols Authors, Creators & Presenters: Zhongming Wang (Chongqing University), Tao Xiang (Chongqing University), Xiaoguo Li (Chongqing University), Biwen Chen (Chongqing University), Guomin Yang (Singapore Management University), Chuan Ma (Chongqing University), Robert H. Deng (Singapore Management University) PAPER Impact Tracing: Identifying the Culprit of Misinformation in Encrypted Messaging Systems Encrypted messaging systems obstruct…
Top 10 surveillance, journalism and encryption stories of 2025

Dec 31, 2025 11:52 AM

Tags: apple, encryption, privacy

A transatlantic row between the UK and the Trump administration erupted after the UK attempted to force Apple to break its advanced encryption. That was just one of a series of stories reporting on the tension between state surveillance and privacy this year First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366636284/Top-10-surveillance-journalism-and-encryption-stories-of-2025
Disney will pay $10 million to settle children’s data privacy lawsuit

Dec 31, 2025 11:52 AM

Tags: data, privacy

Disney has agreed to pay a $10 million civil penalty to settle claims that it violated the Children’s Online Privacy Protection Act by mislabeling videos and allowing data collection for targeted advertising. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/disney-will-pay-10m-to-settle-claims-of-childrens-privacy-violations-on-youtube/
The New Surveillance State Is You

Dec 29, 2025 12:55 PM

Tags: privacy

Privacy may be dead, but civilians are turning conventional wisdom on its head by surveilling the cops as much as the cops surveil them. First seen on wired.com Jump to article: www.wired.com/story/expired-tired-wired-surveillance-state/
TDL 012 – The Architect of the Internet on the Future of Trust

Dec 27, 2025 5:55 AM

Tags: ai, apple, breach, browser, business, cctv, computing, control, credit-card, data, dns, email, google, infrastructure, intelligence, Internet, jobs, law, mail, metric, microsoft, network, privacy, radius, russia, service, spam, threat, ukraine, vulnerability

Summary In this episode of The Defenders Log, Paul Mockapetris, the architect of DNS, discusses the evolving role of the Domain Name System from a simple directory to a sophisticated security tool. He posits that modern networking requires “making sure DNS doesn’t work when you don’t want it to,” comparing DNS filtering to essential services…
Reducing Cyber, Privacy Risks in Healthcare Sector M&As

Dec 25, 2025 8:19 AM

Tags: cyber, cybersecurity, data, healthcare, law, privacy, risk

Healthcare sector mergers and acquisitions dramatically amplify cybersecurity and data privacy exposure for potential buyers and sellers, said attorney Jonian Rafti of law firm Proskauer. But there are critical steps entities can take to reduce those risks, he said. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/reducing-cyber-privacy-risks-in-healthcare-sector-mas-i-5513
NDSS 2025 LAMP: Lightweight Approaches For Latency Minimization In Mixnets With Practical Deployment Considerations

Dec 24, 2025 8:19 PM

Tags: conference, data, Internet, network, privacy

Session 7A: Network Security 2 Authors, Creators & Presenters: Mahdi Rahimi (KU Leuven), Piyush Kumar Sharma (University of Michigan), Claudia Diaz (KU Leuven) PAPER LAMP: Lightweight Approaches For Latency Minimization In Mixnets With Practical Deployment Considerations Mixnets are a type of anonymous communication system designed to provide network privacy to users. They route client messages…