Android user web browsing data may have been provided to Meta and/or Yandex due to a "loophole" in the operating system's loopback interface, regardless of the use of "incognito mode" or any other common privacy protections that would otherwise thwart user tracking.
Senior Correspondent at CPO Magazine
Scott Ikeda is a technology futurist and writer for more than 15 years. He travels extensively throughout Asia and writes about the impact of technology on the communities he visits. Over the last 5 years, Scott has grown increasingly focused on the future landscape of big data, surveillance, cybersecurity and the right to privacy.
The UK data adequacy decision was slated to expire this month, but recently received a six-month extension approval from the EDPB. The civil society groups are calling for withdrawal of this extension if the UK government does not ensure an equivalent level of data protection.
The CISA 2026 budget cuts would be accompanied by a reduction of 1,083 CISA positions, a cut of almost a third of its present count of 3,292 employees. The Cyber Defense Education and Training program would also be gutted, with the budget proposal suggesting that it could be replaced by free resources.
Texas App Store Accountability Act, recently signed into law by Gov. Greg Abbott, gives the big tech players the remainder of 2025 to figure out how they will implement age verification in app stores to prevent children from accessing potentially harmful content.
Philippines-based Funnull Technology, along with one of its administrators, has been hit with OFAC sanctions for its role as a knowing infrastructure provider for hundreds of thousands of malicious sites engaging in cyber scams.
Researchers found a security flaw in OneDrive File Picker that grants apps access to any and all files in the account when the user grants permission for just one file upload, with the language governing this process cited as too "vague" and "unclear" to communicate what is actually happening.
The new guidance actually focuses on three main areas of AI data security: data drift and potentially poisoned data, and also risks in the data supply chain. The guidance builds upon the NSA’s existing Deploying AI Systems Securely publication, but adds much more detail specific to addressing potential vulnerabilities.
A major threat actor has been crippled by an international law enforcement action, as the Lumma infostealer malware operation saw its control panel seized along with infrastructure dwelling in Europe and Japan. This was supplemented by Microsoft seizing some 2,300 domains belonging to the group, which has infected over 394,000 Windows computers globally.
Victims that interacted with the fake KeePass ads would get a maliciously modified version of the password manager called "KeeLoader" designed to exfiltrate passwords and provide a backdoor for further malware delivery and ransomware attacks.
Temu is facing a ₩1.37 billion ($982,420) fine in South Korea over its data transfers to other countries. The privacy law violations are due to failure to adhere to the terms of the PIPA, the law of the land that saw significant amendments come into force in 2023 that put it roughly on par with the protections provided by the GDPR.









