When an AI assistant began referencing private iMessage threads without a clear explanation of how it accessed them, it set off a rapid chain of scrutiny and vendor responses. Apple has moved to tighten macOS’s Full Disk Access (FDA) permissions after concerns that some third-party apps could misuse that powerful system-level privilege to read private files, messages, and browsing histories.
Category: Compliance and Privacy
GDPR, CCPA, HIPAA, PCI-DSS, SOC 2, ISO 27001, NIST, DORA, NIS2, data privacy, data protection, privacy policy, compliance audit, regulatory compliance, data governance, DPO, data processing agreement, right to erasure, data residency, privacy by design, AI Act, EU AI Act, digital identity, eIDAS, cookie consent, consent management, PECR, data localisation, breach notification
Vault Enterprise 2.0: Rethinking LDAP Secrets Management for Enterprise Identity
For security and ops teams, directory credentials have long been a stubborn source of friction: static LDAP passwords, brittle rotation processes, and the need for high‑privilege service accounts create risk and operational toil. Vault Enterprise 2.0 reframes that problem by bringing LDAP static roles into a centralized rotation manager and adding new flows that make onboarding, rotation, and migration safer,
Amazon Faces Months of Repairs After Drone Strikes Cripple Middle East Data Centers
Amazon Web Services says recovery from drone strikes that hit its data centers in the United Arab Emirates and Bahrain will be measured in months, leaving customers in the region facing prolonged disruption and prompting a broader rethink of investments in Middle East infrastructure. The attacks, part of a wider bout of regional hostilities, knocked core compute racks offline, triggered
Meta inks deal for solar power at night, beamed from space
The race to keep massive AI workloads powered around the clock has led Meta to sign a capacity reservation agreement with Overview Energy, a startup developing spacecraft that collect solar energy in space and convert it to near-infrared light beamed at large terrestrial solar farms. The deal — for up to 1 gigawatt of capacity — is a notable early
Lovable AI App Builder Reportedly Exposes Thousands of Projects’ Source Code and Customer Data
A critical Broken Object Level Authorization (BOLA) vulnerability in Lovable, an AI-powered app builder, has reportedly left thousands of legacy projects accessible to unauthorized users. According to security researchers, an API endpoint returned full project data — including source code, database credentials, AI chat histories, and customer information — for projects created before November 2025. While Lovable appears to have
Microsoft Teams Desktop Update Breaks Launch for Some Users After Caching Regression
A subset of Microsoft Teams desktop users found themselves unable to launch the application after a recent service update introduced a caching regression. Affected clients became stuck on the loading screen, displaying an error that advised users to refresh, and could not complete the app’s startup sequence. Microsoft has acknowledged the incident and moved to roll back the update while