AI Cybersecurity Ethics Privacy

Ai surveillance as police can search for people based on a description

Flock Safety allows police to continuously search camera footage using AI for individuals matching a written description, such as clothing, color, or objects. WIRED reconstructed the interface and found that officers can geofence areas and receive automatic alerts as soon as the AI detects a potential match. Although Flock is introducing new controls, such as […]

Cybersecurity Identity & Access Management MFA Phishing Social engineering

Oauth phishing bypasses passwords and MFA

The FBI warns of highly targeted OAuth consent phishing attacks aimed at prominent figures, their families, and acquaintances. Attackers impersonate government officials, media personnel, or known contacts, luring victims with fake file shares or meeting invitations. Granting permission to a malicious OAuth application gives attackers long-term access to emails, files, and other sensitive account data. […]

Data Protection Digital Identity Privacy

Protecting minors online takes more than age verification

DIDAS warns that age verification alone cannot solve harmful content, addictive design, profiling or commercial exploitation of children online. Where verification is necessary, it should reveal only what is required, such as a simple “over/under age threshold”, without exposing identity, birth date or biometrics. DIDAS proposes six principles: privacy by design/default, unlinkability, data minimisation, open-source […]

Basic Privacy Training Cybersecurity Data Breach Data Protection Privacy

8.7 million airport customers hit by major UK data breach

Cyberattackers have stolen personal data belonging to 8.7 million customers of three major UK airports. The breach affects Manchester, Stansted and East Midlands airports, exposing emails, phone numbers, vehicle registrations and postcodes. The compromised information came from services including parking, lounges, Fast Track bookings and airport Wi-Fi. Manchester Airport Group temporarily disabled its “Manage My […]

Cybersecurity Digital Identity EIDAS

Belgian eID signing software critical flaws shake trust in digital identity

Security researchers uncovered severe vulnerabilities in Belgium’s Connective eID signing software, used by more than 2 million citizens. The technology is deployed by 8 of Belgium’s 10 largest banks, more than 60 government agencies and over 1,000 enterprises. A fundamental weakness was that the software failed to properly verify which website was communicating with the […]

AI Compliance Cybersecurity Infrastructure Security Risk management Security

AI lowers the barrier for attacks on industrial systems

U.S. security agencies warn of active cyber threats targeting Siemens S7 PLCs, used across energy, water, manufacturing, and other critical infrastructure. Attackers are leveraging AI-generated exploits and internet scanning to identify and target exposed or poorly secured industrial control systems. AI makes ICS attacks faster and more accessible, reducing the level of specialized OT expertise […]

Multifactor Authentication Password Management Risk management Vulnerability

Passkeys are strong, but not untouchable

Researchers have uncovered new attack vectors that can undermine passkey authentication, challenging the idea that passwordless automatically means attack-proof. The attacks focus on weaknesses around the authentication flow and implementation, rather than breaking the underlying cryptography. Manipulation of WebAuthn processes, fallback mechanisms and compromised environments can potentially allow attackers to bypass or weaken passkey protection. […]