Know what changed. Know what matters.

In April 2026 France’s ANTS database was breached, exposing between 11‑18 million credential records.

The FTC keeps the COPPA rule unchanged while boosting parent‑education initiatives.

The Consumer Financial Protection Bureau announced a rule on December 3, 2024 that would prohibit data brokers such as Acxiom, Experian, and TransUnion from selling sensitive personal details without consumer knowledge or consent.

A threat actor used an AI-generated PowerShell script to map a corporate Active Directory environment.

A PMC study found 895 hacking incidents last year—nearly forty percent of total cyberattacks—indicating a shift toward advanced zero‑day exploits.

A July 11 release of the popular jscrambler npm package was found to install a native Rust‑based infostealer on Windows, macOS, and Linux via a pre‑install hook.

A stored cross‑site scripting flaw in Zimbra’s Classic Web Client lets attackers run malicious code via specially crafted emails.

A compromised GitHub repository let Injective Labs release a malicious npm module that siphons private keys and mnemonic seed phrases from crypto wallet users.

A critical unpatched flaw in Alibaba’s XQUIC library allows attackers to crash HTTP/3 servers without authentication.

Senator Maggie Hassan’s Senate report shows how data broker practices enable scams and identity theft, costing consumers an estimated $21 billion.

The newly announced Athena clearinghouse operates quietly behind the scenes, offering a pre‑public fix model that could streamline patch deployment but also raises concerns over dependence on a single hub.

The Federal Trade Commission’s latest agreement extends regulation of social media giant X through 2042, raising questions about long‑term enforcement and innovation costs.