Compliance and Privacy

GDPR, CCPA, HIPAA, PCI-DSS, SOC 2, ISO 27001, NIST, DORA, NIS2, data privacy, data protection, privacy policy, compliance audit, regulatory compliance, data governance, DPO, data processing agreement, right to erasure, data residency, privacy by design, AI Act, EU AI Act, digital identity, eIDAS, cookie consent, consent management, PECR, data localisation

Page 2

Atlassian Urges Immediate Patching After Critical Arbitrary File-Access Flaw

Atlassian has released emergency fixes for a critical arbitrary file access vulnerability that affects eight of its products — including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589 with a CVSS score of 9.3, the flaw allows unauthenticated attackers to retrieve specific files from an application’s web root if they can guess the exact path and filename. While the bug does not let attackers enumerate directories, the ability to fetch particular…

Saugata DattaOct 6, 20264 min read187

AWS

Amazon Drops NDAs as Data Center Backlash Grows

Amazon’s recent move to stop using nondisclosure agreements (NDAs) with government agencies marks a tactical shift in a widening dispute over the role of large data centers in local communities. Announced by AWS CEO Matt Garman in a blog post, the change comes as cities and states across the U.S. consider moratoriums and tougher scrutiny of new facilities. The announcement is short but strategic: Amazon is trying to blunt a…

Saugata DattaOct 4, 20264 min read222

Compliance and Privacy

Lee Orders Nationwide Security Sweep After Multiple South Korean Bank Breaches

South Korea’s president, Lee Jae Myung, has ordered an urgent and comprehensive investigation into a string of recent data breaches that exposed personal information across several banks and finance firms. The incidents, reported in early October 2026, have raised alarms about the security of employee-support systems and third-party services that sit outside core customer banking platforms. Authorities are probing whether automated tools — including traces of AI-driven automation — played…

Saugata DattaOct 4, 20264 min read155

Compliance and Privacy

ShinyHunters’ “Rey” Detained in Jordan: What His Cooperation Means for the FBI Probe

A suspected member of the ShinyHunters group who uses the online alias “Rey” has reportedly been detained in Jordan and is cooperating with U.S. law enforcement. Identified in reporting as Saif al‑Din Khader (also known online as ReyXBF), he was allegedly taken into custody on September 29, 2026. Sources say his cooperation is already assisting the FBI and other agencies as they pursue leads to identify and apprehend additional individuals…

Saugata DattaOct 4, 20264 min read151

AI Agents and Frameworks

Apple tightens Full Disk Access controls to block potential AI agent abuse

When an AI assistant began referencing private iMessage threads without a clear explanation of how it accessed them, it set off a rapid chain of scrutiny and vendor responses. Apple has moved to tighten macOS’s Full Disk Access (FDA) permissions after concerns that some third-party apps could misuse that powerful system-level privilege to read private files, messages, and browsing histories. The change is aimed squarely at making sure users understand…

Saugata DattaOct 3, 20265 min read207

Compliance and Privacy

Vault Enterprise 2.0: Rethinking LDAP Secrets Management for Enterprise Identity

For security and ops teams, directory credentials have long been a stubborn source of friction: static LDAP passwords, brittle rotation processes, and the need for high‑privilege service accounts create risk and operational toil. Vault Enterprise 2.0 reframes that problem by bringing LDAP static roles into a centralized rotation manager and adding new flows that make onboarding, rotation, and migration safer, more auditable, and far easier to operate at scale. The…

Saugata DattaMay 8, 20264 min read205

AWS

Amazon Faces Months of Repairs After Drone Strikes Cripple Middle East Data Centers

Amazon Web Services says recovery from drone strikes that hit its data centers in the United Arab Emirates and Bahrain will be measured in months, leaving customers in the region facing prolonged disruption and prompting a broader rethink of investments in Middle East infrastructure. The attacks, part of a wider bout of regional hostilities, knocked core compute racks offline, triggered flooding when fire suppression systems activated, and damaged cooling systems—problems…

Saugata DattaMay 2, 20263 min read306

Artificial Intelligence

Meta inks deal for solar power at night, beamed from space

The race to keep massive AI workloads powered around the clock has led Meta to sign a capacity reservation agreement with Overview Energy, a startup developing spacecraft that collect solar energy in space and convert it to near-infrared light beamed at large terrestrial solar farms. The deal — for up to 1 gigawatt of capacity — is a notable early commercial commitment for a technology that, if it scales, could…

Saugata DattaApr 27, 20263 min read298

Compliance and Privacy

Lovable AI App Builder Reportedly Exposes Thousands of Projects’ Source Code and Customer Data

A critical Broken Object Level Authorization (BOLA) vulnerability in Lovable, an AI-powered app builder, has reportedly left thousands of legacy projects accessible to unauthorized users. According to security researchers, an API endpoint returned full project data — including source code, database credentials, AI chat histories, and customer information — for projects created before November 2025. While Lovable appears to have patched newly created projects, the persistent exposure of older projects…

Saugata DattaApr 20, 20264 min read420

Azure

Microsoft Teams Desktop Update Breaks Launch for Some Users After Caching Regression

A subset of Microsoft Teams desktop users found themselves unable to launch the application after a recent service update introduced a caching regression. Affected clients became stuck on the loading screen, displaying an error that advised users to refresh, and could not complete the app’s startup sequence. Microsoft has acknowledged the incident and moved to roll back the update while monitoring recovery across impacted devices. What happened Microsoft logged the…

Saugata DattaApr 20, 20263 min read331

Compliance and Privacy

LinkedIn’s BrowserGate: Scanning Visitors for 6,236 Chrome Extensions and Device Data

A recent security analysis has raised alarms about how LinkedIn inspects the browsers of people who visit its site. Researchers at Fairlinked e.V. published what they call the "BrowserGate" report, and independent testing by BleepingComputer corroborated many of the findings: LinkedIn appears to inject client-side JavaScript that probes visitors’ browsers for thousands of Chrome extensions and collects a range of device telemetry. The behavior has rekindled discussions about browser fingerprinting,…

Saugata DattaApr 7, 20264 min read471

Compliance and Privacy

Announcing General Availability of Server Logic in Power Pages

Power Pages has taken a significant step forward: Server Logic is now generally available for production use. What began as a preview capability to bring server-side processing closer to makers and developers has matured into a production-ready feature designed for enterprise scenarios. With this GA release, organizations gain a native, governed, and extensible way to run server-side operations directly within Power Pages—reducing complexity, improving performance, and enabling more secure integration…

Saugata DattaApr 7, 20263 min read564

Free Tools: IP, DNS, SSL