Scott Ikeda, Senior Correspondent at CPO Magazine

Digital skull on screen showing AI malware

Google TIG: Dynamic AI Malware That Adapts to Defense Conditions on the Fly

November 10, 2025

Google's report of novel AI-enabled malware in the wild is a game changer if these capabilities are now being picked up by sophisticated attackers. It identifies two specific new malware families, "PROMPTFLUX" and "PROMPTSTEAL," that are the first to incorporate a "just in time" dynamic function creation feature that draws on an LLM.

Cyber Security News

Five Years in the Making, New UN Cybercrime Treaty Signed by 65 Nations Amidst Criticism

November 3, 2025

The UN cybercrime treaty is meeting with some pushback from both the tech industry and human rights activists. Privacy and human rights organizations, to include the UN's own High Commissioner for Human Rights, have aired concerns that the treaty's definitions of crimes are too vague and open to potential abuse.

Data Protection News

Meta Announces New Layoff of Privacy Compliance Employees in Favor of Agentic AI

November 3, 2025

An internal memo sent to Meta risk division workers on October 29 by Protti outlined the company's intention to lay off hundreds of privacy compliance staff, as part of cost-cutting measures that shift more duties from humans to AI.

Hand using tablet with Google Gmail app showing passwords stolen in alleged data breach

Cyber Security News

Were 183 Million Gmail Passwords Stolen? Google Responds to Claims of Data Breach

October 29, 2025

Google issued an explanatory series of posts on X outlining that there were no new passwords stolen, and that any legitimate credentials came from an assortment of prior data breaches stretching back years that have been circulating on underground forums. Much of the collection was built via infostealer malware.

Digital shields over globe showing cyber defense

Cyber Security News

Cyberspace Solarium Commission: First Regression in US National Cyber Defense Since 2019

October 27, 2025

The new CSC report warns that national cyber defense is "stalling" in most areas and "slipping" in some. Its central point of criticism is that only 35% of 82 recommendations that the commission made in 2020 have been fully implemented, with about 13% still facing barriers to progress and another 18% making progress but still distant from actual implementation.

Cyber Security News

Experian Netherlands Credit Rating Agency Gets €2.7 Million GDPR Fine for Personal Data Collection

October 27, 2025

Credit rating agency Experian's Netherlands branch has been assessed a €2.7 million (about $3.2 million) GDPR fine for improper collection of personal data, which was drawn from multiple public and private sources that data subjects were not necessarily aware of.

Hand touching screen on tablet showing privacy sandbox

Data Privacy News

RIP Google Privacy Sandbox: “Cookie Replacement” Project Officially Terminated Due to “Low Adoption”

October 24, 2025

Google's blog post on the subject simply announced that the 10 remaining available Privacy Sandbox APIs and tools were being deprecated, but follow-up questioning by various tech media sources produced statements confirming that it is all over for the project.

Amazon buildings showing AWS outage and service disruptions

Cyber Security News

AWS Outage Ends After Worldwide Disruption, But Cleanup Continues

October 22, 2025

The AWS outage that caused widespread global disruption for about half of Monday has officially been resolved, but numerous lingering issues remain that could take days or even weeks to fully resolve.

Hacker in front of China flag showing security breach leaked source code

Cyber Security News

Security Breach of F5 Involved BIG-IP Source Code Theft, Exposure of Customer Data to Nation-State Hackers

October 20, 2025

F5 has disclosed that an August breach exposed source code and customer data to what it calls "nation-state hackers." The company has not made an official attribution, but third-party security researcher sources are linking the attack to China's UNC5221.

Cyber Security News

UK NCSC Annual Report: “Nationally Significant” Cyber Incidents Are Now a Weekly Occurrence

October 16, 2025

The 2025 UK report is composed of 1,727 tips on cyber incidents over the course of the year that developed into a total of 429 cases that involved intervention by the NCSC IM team. The share of incidents ranked as "nationally significant" jumped from 89 in the prior year to 204 in the current one.

Google TIG: Dynamic AI Malware That Adapts to Defense Conditions on the Fly

Five Years in the Making, New UN Cybercrime Treaty Signed by 65 Nations Amidst Criticism

Meta Announces New Layoff of Privacy Compliance Employees in Favor of Agentic AI

Were 183 Million Gmail Passwords Stolen? Google Responds to Claims of Data Breach

Cyberspace Solarium Commission: First Regression in US National Cyber Defense Since 2019

RIP Google Privacy Sandbox: “Cookie Replacement” Project Officially Terminated Due to “Low Adoption”

AWS Outage Ends After Worldwide Disruption, But Cleanup Continues

Security Breach of F5 Involved BIG-IP Source Code Theft, Exposure of Customer Data to Nation-State Hackers

UK NCSC Annual Report: “Nationally Significant” Cyber Incidents Are Now a Weekly Occurrence

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII

Hackers Abuse Custom GPT Instances on chatgpt.com to Distribute ClickFix Malware

AI Coding Agents Habitually Leak Thousands of Private Developer Screenshots to Public Repositories