When AI chatbots and LLMs get legal, check your privilege
Using AI tools and LLMs for sensitive matters, such as for legal and medical uses, raises important questions about where that data goes and who can access it.
this week in security — july 26 2026 edition
OpenAI models hacked Hugging Face, flawed alarm exposes millions of cars to hacks, healthcare software maker breached, Russia exploiting email zero-day, residential proxy crackdown, Iran hacking water and energy systems, and more.
Most fitness wearables lack end-to-end encryption and don't disclose government data demands, says EFF
Most fitness wearables don't use end-to-end encryption to protect users' health information, leaving open the door for government demands for data.
this week in security — july 19 2026 edition
U.S. police buying vans with spy tech, Scattered Spider hackers jailed, Russia called out on European cyberattacks, Iran tapped phone networks to track U.S. troops, WordPress bugs under attack, fitness bands are a privacy hot mess, and more.
U.S. judge denied feds a month-long warrant to snoop on the phones of thousands of Ohio residents
The magistrate judge's decision offers a rare view into how the government seeks to use cell-site simulators during law enforcement investigations.
this week in security — july 12 2026 edition
Insurance groups stress-test U.S. response to China attack, EU Parliament calls for spyware probe, Accenture hack, lessons learned after CISA's password lapse, London transit hacker faces jail, Flock cameras flag car reviewer, and more.
Reframing smart glasses as 'pervert glasses'
Smart glasses equipped with cameras, microphones, and AI are a creeping privacy and security nightmare, prompting backlash.
this week in security — july 5 2026 edition
Supreme Court rules on geofence warrants, Oracle customers hacked (again), DHS confirms intel-sharing breach, six ISPs had email logins stolen, Apple bug exposes private emails, politician probing spyware hacked with Pegasus, and more.
Reflections on eight years of writing ~this week in security~
Your favorite weekly cybersecurity newsletter marks eight years on the web.
this week in security — june 21 2026 edition
Anthropic's ban wasn't really about an AI jailbreak, hackers target Fortinet firewalls in latest mass hack, Ozempic maker hacked twice, members of elite secret society exposed, spy agencies buying more people's bulk location data, and more.
Dozens of America's largest companies have no simple way to report security flaws
New analysis shows that around one-third of America's Fortune 100 companies do not have a vulnerability disclosure policy, bug bounty, or a dedicated email address for reporting security flaws.
this week in security — june 14 2026 edition
ShinyHunters breach 100+ companies with new Oracle zero-day, FISA spy law lapses, Flock's flucked-up week, FCC wants to kill burner phones, dozens of Microsoft's open source tools hacked, NSO spying on WhatsApp users, and more.
