CISA updates Play ransomware guidance as victim count nears 900
A joint CISA, FBI, and ASD advisory update says Play ransomware has hit roughly 900 entities and remains active across multiple regions and sectors.
Archive / briefings
Briefings and field notes
Structured reporting on cybersecurity incidents, privacy harms, platform governance, and AI operational risk — designed to be scanned quickly and revisited later.
Security
Akira advisory update shows ransomware crews are still winning through edge and remote-access weaknesses
A 2025 multi-agency update on Akira ransomware highlights continued attacks on critical sectors, with emphasis on edge-device exploitation, credential abuse, remote admin tooling, and faster encryption variants.
Privacy
EDPB LLM privacy report signals a more operational phase of AI governance
A 2025 EDPB-backed report on LLM privacy risks focuses on concrete mitigations and real-world deployment scenarios rather than abstract AI principles.
Privacy
EDPB links cross-border data-transfer rules with AI skills and governance capacity
A June 2025 EDPB update combined finalized guidance on third-country authority requests with new AI and data-protection training material, pointing to a more operational privacy-governance agenda.
Privacy
EDPB blockchain guidance is really about design-stage privacy governance
The EDPB’s 2025 blockchain guidance emphasizes early design decisions, role clarity, DPIAs, data minimisation, and limits on placing personal data into immutable systems.
Privacy
ICO fines Reddit over children’s privacy failures and age-assurance gaps
The UK ICO says Reddit processed children’s data unlawfully, failed to implement robust age assurance, and did not complete a relevant DPIA before January 2025.
Privacy
Imgur fine reinforces that child-safety cases are also design and data-governance cases
The UK ICO fined MediaLab over Imgur’s handling of children’s data, citing absent age checks, unlawful processing of under-13 data, and failure to carry out a DPIA.
Security
Joint advisory flags Interlock ransomware as an active cross-sector threat
CISA and partner agencies say Interlock ransomware activity is affecting businesses and critical infrastructure, with current guidance focused on access control, segmentation, patching, and phishing defense.
Security
Last 48 hours watchlist: three signals worth tracking
A monitoring note on three public signals worth following across student cyber safety, AI workplace tooling risk, and privacy governance.
Privacy
ICO investigations show child-data enforcement is moving upstream into platform design
The UK ICO’s investigations into TikTok, Reddit, and Imgur signaled a broader regulatory focus on recommender systems, age assurance, and how platforms structurally handle children’s data.
Policy
Student cyber safety is becoming a global policy issue
Education systems are increasingly exposed to AI-enabled fraud, manipulation, and surveillance, making student cyber safety a serious governance topic.
Security
Why the next wave of AI security stories will be about interfaces
The practical risk surface for AI deployment is increasingly shaped by extensions, workplace tooling, browser flows, and user-facing integrations.
Privacy
Privacy guardrails are becoming an AI competitiveness question
Weak privacy controls can make AI deployment politically unstable, operationally fragile, and harder to sustain over time.