Binance Withdrawals Resume, Plus 3 Tech Stories
Binance is restoring withdrawals after a $6.3 billion theft. Plus enforceable school AI privacy terms, Applebee’s exposed app credential, and Google Sheets citations.
Binance is restoring withdrawals after a $6.3 billion theft. Plus enforceable school AI privacy terms, Applebee’s exposed app credential, and Google Sheets citations.
GM will pay $220 million over driver-data allegations. Plus Florida’s financial-aid breach, DreamHost credential exposure, and an FTC pricing inquiry.
New York restricts manipulative AI companion behavior with minors. Plus a DHS personnel leak, Chrome’s Gmail autofill, and ads inside AI Mode conversations.
Windows Server 2016 support ends January 12, 2027. Plus Quest’s patient-record breach and the security risk left behind by an abandoned app.
PHP disclosed a new session upload progress vulnerability with no fixed release yet. Here’s the temporary mitigation, plus AWS capacity pressure and PwC’s vendor incident.
Claude submitted a false homicide tip during an Anthropic evaluation. Plus a ransomware-negotiator arrest, Arizona’s court breach, and law-firm data exposure.
South Korean churches investigate breaches exposing member and donation data. Plus a critical Atlassian flaw, FICO layoffs, and Google’s new nuclear-power deal.
A missed PeopleSoft patch exposed sensitive FBI personnel data. Plus Google’s Spirit data bid, another exploited NetScaler flaw, and 400 AI-linked bank job cuts.
Spain’s data regulator received its first report of an AI-agent-linked breach. Plus CenterPoint customer data, an actively exploited WooCommerce plugin, emergency Windows updates, and memory shortages hitting smaller hardware makers.
Revolut disclosed sensitive customer records after fraudulent requests came from a real government email domain. Plus BlueMoon’s Chrome/Windows exploit chain, new EU cyber-reporting deadlines, South Korea’s expanded espionage law, and NASA’s open lunar AI model.
An exposed Vietnam-linked APIS database held 220.8 million passenger and crew records. Plus active MikroTik attacks, Microsoft 365 phishing that steals sessions after MFA, a 1.08-million-person Mathspace breach, and Australia’s plan to let users switch off algorithmic feeds.
AI data centers are pushing up memory costs across consumer tech. Plus an active Magento zero-day, a much larger Trezor shipping-data breach, and a European rocket milestone.
The FBI is investigating a dark-web trove claiming more than 153 million driver’s-license scans. Also: a C-Track court breach, grid stress from extreme heat, NYC’s school AI moratorium, and Google’s ad-tech antitrust remedies.
Aurora ransomware operators used Cursor inside real victim networks. Today’s brief also covers a critical Avada update, an 8.7-million-person airport breach, Anthropic’s Pentagon court win, and Google’s EEA search-policy change.
Attackers are exploiting a macOS Screen Sharing flaw, WordPress and GitLab need security updates, Heights Finance exposed sensitive data, and Gemini expands in schools.
North Korean Defectors’ details leaked, Freedom and Democracy on the Internet, Webcam Security, 2019 will be the year to watch the US Congress’ handling of data privacy, Chinese schools track students through ‘smart uniforms,’ Google’s Duo hits a milestone, Uber Drivers receive settlement, Alexa is a great de-stressing tool, Tesla and MIT environment win, Snapchat gets dog filters