A new study maps 21 open-source AI risk tools against 32 risk categories, including Promptfoo, Garak, PyRIT, NeMo Guardrails and Langfuse. The ecosystem performs particularly well in AI testing, red teaming, content safety, data governance and post-deployment monitoring. But major gaps remain in board oversight, regulatory compliance, legal remedies and financial/market controls, areas software alone […]
New research shows that readers require clear, visible, and detailed disclosures when AI is used in journalism. A generic “AI-generated” label is not sufficient. The public wants to know exactly how the technology was used: was it light copy-editing, or was the entire article or accompanying image created by AI? Visible logos, watermarks, and prominent […]
Microsoft warns of CaptiveCrunch, a global campaign in which Storm-2945 manipulates hotel, conference, and other guest networks to attack business travelers. Through hijacked captive portals, victims are redirected to phishing pages or misled with fake browser and Windows updates that install malware. The CornFlake RAT and ChocoShell used can steal passwords, cookies, Microsoft 365 tokens, […]
No fewer than 1,367 employees from leading AI companies have issued an urgent warning: the automation of AI research could suddenly and extremely accelerate development. The risk is growing significantly that artificial intelligence capabilities will develop faster than our human ability to secure, understand, and maintain control over these systems. However, due to immense international […]
Meta must pay 567 million dollars (€492 million) because a judge ruled that Facebook and Instagram harmed the mental health of children. The judge in New Mexico even labeled Meta’s impact as a ‘public nuisance’, comparable to the societal consequences of air pollution. Meta must implement stricter age verification, remove accounts of children under 13, […]
eIDAS 2.0 requires all EU member states to offer at least one certified European Digital Identity (EUDI) Wallet by the end of 2026 at the latest. The wallet gives approximately 450 million Europeans more control over digital identity data and credentials, with privacy and data minimization as the starting point. From 2027, banks, telecommunications companies, […]
Dutch regulators (ACM, AFM, AP, DNB, and RDI) are calling on the government and the business community to make digital autonomy a strategic procurement criterion and to become less dependent on a small number of (mostly non-European) IT providers. Open standards, interoperability, and switching options must reduce vendor lock-in and increase cyber resilience. As a […]
A security incident at logistics partner CEVA Logistics may have led to a data breach of customer information from bol and de Bijenkorf. Potentially compromised data includes names, addresses, email addresses, phone numbers, track & trace information, and order details. Bol and de Bijenkorf have informed the Dutch Data Protection Authority and are warning affected […]
Apple is challenging the UK government’s renewed demand for access to encrypted iCloud backups of British users through the Investigatory Powers Tribunal. The tech giant reiterates it will never build a backdoor into its products, arguing it would weaken security for everyone. The UK says lawful access is essential for tackling terrorism, serious crime, and […]
Google’s synchronized passkeys have proven vulnerable to malware that can take over accounts without a PIN, biometrics, or user interaction. Researchers from Palo Alto Unit 42 demonstrated three attacks, including the theft of the secret key used to decrypt all synchronized passkeys. Additionally, some online services blindly relied on the ‘User Verified’ flag without actually […]