OpinionPrivacy & Security
Fargo Facial Recognition Lawsuit Puts AI Probable Cause on Trial
Angela Lipps' $10 million suit shows why facial recognition cannot be treated as probable cause in police warrants.
Privacy & Security
Coverage of consumer privacy, biometric data, surveillance technology, cybersecurity threats, and the laws and tools that shape how personal data is collected and protected.
11 articles
Opinion
How-toPrivacy & Security
What to Do If Your Driver's License Was Stolen in the IDScan Breach
153 million driver's licenses surfaced on a dark-web market before IDScan admitted the breach. Here's the exact response sequence that actually reduces fraud…
NewsPrivacy & Security
INC Ransomware Chains Two SonicWall SMA1000 Zero-Days for Root Access
INC Ransomware is chaining a CVSS 10.0 SSRF with a path-traversal root escalation to fully take over SonicWall SMA1000 VPNs, with victims already posted since…
ExplainerPrivacy & Security
GrapheneOS Duress PIN: How the Phone-Wipe Feature Actually Works
A federal case in Atlanta is testing whether entering a GrapheneOS duress PIN at a border checkpoint counts as destroying evidence.
How-toPrivacy & Security
How to Adapt Your Patch Workflow for Cisco's New Biweekly Advisory Schedule
Cisco's PSIRT moves to first and third Wednesday disclosures in July 2026. Here's how to retool your patch pipeline before the cadence doubles.
NewsPrivacy & Security
How TeamPCP Used a Poisoned Nx Console Extension to Breach GitHub's Internal Repositories
A trojanized Nx Console extension sat live on the VS Code Marketplace for under 20 minutes - long enough to exfiltrate 3,800 GitHub-internal repositories.
NewsPrivacy & Security
Pwn2Own Berlin 2026: $1.3M Paid for 47 Zero-Days, DEVCORE Sweeps Master of Pwn
DEVCORE banked $505,000 chaining bugs across SharePoint, Exchange, Edge, and Windows as AI coding agents joined the target list for the first time.
How-toPrivacy & Security
How to Run a Vulnerability Scan on Your Codebase With OpenAI Daybreak
Daybreak isn't self-serve. Here's how to request access, connect a GitHub repo, and review the threat model Codex Security builds before it scans a single line.
ExplainerPrivacy & Security
How RCS End-to-End Encryption Works on iPhone in iOS 26.5
Apple turned on encrypted RCS between iPhone and Android on May 12, 2026, but the lock icon only appears when both carriers cooperate.
NewsPrivacy & Security
Vibe-Coded Apps Are Leaking Corporate and Medical Data Across the Open Web
RedAccess found 380,000 publicly accessible apps built on Lovable, Replit, and Base44, with 5,000 exposing corporate, medical, and financial data.
News
Privacy & Security
CVE-2026-41940: The cPanel Zero-Day Exploited for Two Months Before Anyone Could Patch It
A CVSS 9.8 authentication bypass let attackers take over 1.5 million cPanel servers - and exploitation started 64 days before the patch existed.