China’s AI labeling rules require visible and metadata marks on generative content. Here’s how the 5.6M-removal enforcement drive reaches foreign vendors.
Shopify public apps must enforce an IP allowlist by November 20. Bulk operations break first on November 12; the Admin API hard cutoff is April 1, 2027.
Postman desktop silently auto-installs Codex and Claude plugins into user scope, approves its own startup hook, and publishes API activity by default.
A practical guide to mobile device management for BYOD security audits, covering enrollment models, framework mapping, evidence sets, and platform trade-offs.
Scribd’s breach notice itemizes emails, card last four digits, issuer, expiry and payment history, but no passwords. Here is what that gap means for users.
Meta paused Muse AI chat sharing after researchers found 6,800+ discoverable links leaking internal documents, a marketing company’s revenue review marked for its CEO, and loan files via passive DNS.
Go shipped an urgent crypto/x509 update blocking eight compromised eMudhra intermediates. Here is why every Go binary must be rebuilt to pick up the fix.
Railway’s October build-system intrusion reached encrypted environment variables, potentially exposing AI provider API keys for about 100,000 workspaces.
A practical CASB deployment guide covering proxy versus API modes, framework mapping, and audit evidence for securing SaaS applications.
A New Mexico judge ordered Meta to pay $25 billion over the Cambridge Analytica scandal, the largest state verdict yet against the company.
eMudhra’s intermediate CA revocation left a trust-store gap: browsers blocked the keys fast, but runtimes and API clients lagged behind. Here’s the audit.
Dubrovsky’s sealed extortion charges reveal the legal exposure for ransomware negotiators and the controls victims need before the next incident.