Security Bulletin

The Delete Request and Opt-out Platform (DROP) launches Aug. 1 and hundreds of thousands of California residents already registered. Other states could follow if the process goes smoothly.

The organization behind Team USA's Olympic/Paralympic fencing teams has automated identity verification to handle growing membership, cutting manual review time while ensuring athletes compete in the correct categories.

I was asked for help with a problem similar to the following.

Megjelent a 2026. 31. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2026.07.24. és 2026.07.30. között kezelt incidensek, valamint az elosztott kormányzati IT biztonsági csapdarendszerből (GovProbe1) származó adatok statisztikai eloszlását is...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The acquisition aims to integrate Permiso’s technology for detecting and mitigating identity threats across human, non-human, and agentic identities into Okta’s existing platform.

The breach, claimed by the ExfilSquad hacking group, exposed names, job titles, and phone numbers of head teachers, university staff, and government officials.

Security firm Silent Push's research, dubbed "DangleGeddon," utilized AI to massively expand the discovery of vulnerable domains and subdomains.

The Kremlin claims Telegram facilitated "acts of sabotage and terrorism, mass murder, and cyber fraud," resulting in "numerous human casualties."

The OAIC's updated guidance clarifies exceptions to consent obligations for Australian Privacy Principle (APP) entities considering facial recognition in retail settings.

The lawsuit alleges that Hims & Hers placed pixel-sized trackers from Meta, Snap, Microsoft, Pinterest, Reddit and X on its website.

The attack chain begins with a phishing lure disguised as an invoice, utilizing attacker-controlled content hosted on legitimate QQ and Tencent Cloud services.