📰 NicFab Newsletter #4

📅 20 gennaio 2026

Privacy, Data Protection, AI, Cybersecurity & Tech Law - Rassegna settimanale sugli ultimi sviluppi normativi europei e internazionali.

📖 Leggi il numero completo:
https://www.nicfab.eu/it/newsletter/2026-01-20-issue-04/

#Privacy #DataProtection #AI #Cybersecurity #TechLaw

📰 NicFab Newsletter #4

📅 January 20, 2026

Privacy, Data Protection, AI, Cybersecurity & Tech Law - Weekly review on the latest European and international regulatory developments.

📖 Read the full issue:
https://www.nicfab.eu/en/newsletter/2026-01-20-issue-04/

#Privacy #DataProtection #AI #Cybersecurity #TechLaw

Daily Digest | 20 gennaio 2026

APT-Grade PDFSider Malware Used by Ransomware Groups
SecurityWeek RSS Feed
https://www.securityweek.com/apt-grade-pdfsider-malware-used-by-ransomware-groups/

Humans＆, a ‘human-centric’ AI startup founded by Anthropic, xAI, Google alums, raised $480M seed round
TechCrunch
https://techcrunch.com/2026/01/20/humans-a-human-centric-ai-startup-founded-by-anthropic-xai-google-alums-raised-480m-seed-round/

Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution
The Hacker News
https://thehackernews.com/2026/01/three-flaws-in-anthropic-mcp-git-server.html

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading
The Hacker News
https://thehackernews.com/2026/01/hackers-use-linkedin-messages-to-spread.html

PI_COM:C(2026)20: COMMISSION DELEGATED REGULATION (EU) …/... supplementing Regulation (EU) 2016/429 of the European P...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=PI_COM:C(2026)20

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 21 gennaio 2026

CELEX:02022D2269-20251211: Council Decision (CFSP) 2022/2269 of 18 November 2022 on Union support for the implementat...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02022D2269-20251211

In an effort to protect young users, ChatGPT will now predict how old you are
TechCrunch
https://techcrunch.com/2026/01/20/in-an-effort-to-protect-young-users-chatgpt-will-now-predict-how-old-you-are/

SWD:2026:2:FIN: COMMISSION STAFF WORKING DOCUMENT EVALUATION Accompanying the document REPORT FROM THE COMMISSION TO ...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=SWD:2026:2:FIN

Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto
The Hacker News
https://thehackernews.com/2026/01/evelyn-stealer-malware-abuses-vs-code.html

OpenAI will try to guess your age before ChatGPT gets spicy
The Register
https://go.theregister.com/feed/www.theregister.com/2026/01/21/openai_bets_on_age_prediction/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 22 gennaio 2026

EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation o...
EDPB publications
https://www.edpb.europa.eu/our-work-tools/our-documents/edpbedps-joint-opinion/edpb-edps-joint-opinion-12026-proposal_en

EDPB-EDPS Joint Press Release
EDPS News Feed
https://www.edps.europa.eu/press-publications/press-news/news/2026/edpb-edps-joint-press-release

EDPB and EDPS support streamlining AI Act implementation but call for stronger safeguards to protect fundamental rights
European Data Protection Board
https://www.edpb.europa.eu/news/news/2026/edpb-and-edps-support-streamlining-ai-act-implementation-call-stronger-safeguards_en

Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex
The Hacker News
https://thehackernews.com/2026/01/cisco-fixes-actively-exploited-zero-day.html

Not to be outdone by OpenAI, Apple is reportedly developing an AI wearable
TechCrunch
https://techcrunch.com/2026/01/21/not-to-be-outdone-by-openai-apple-is-reportedly-developing-an-ai-wearable/

#Privacy #AI #Cybersecurity #DailyDigest

📢 Recent Article on NicFab Blog

🇩🇰 The Danish Approach to Deepfakes: Can Copyright Protect Digital Identity?

Denmark is pioneering an innovative legal strategy: using copyright law to combat non-consensual deepfakes. By recognizing individuals' rights over their own image as a form of intellectual property, this approach offers faster remedies than traditional privacy litigation.

Key points:
- Denmark's copyright-based deepfake strategy
- Comparison with EU regulatory approaches
- Legal analysis and potential implications
- Strengths and limitations of this framework

🔗 https://www.nicfab.eu/en/posts/danish-copyright-deepfakes/

#Deepfakes #Copyright #DigitalIdentity #Privacy #EULaw #Denmark

📢 Articolo Recente su NicFab Blog

🇩🇰 L'approccio danese ai deepfake: il copyright può tutelare l'identità digitale?

La Danimarca sta sperimentando una strategia legale innovativa: utilizzare il diritto d'autore per contrastare i deepfake non consensuali. Riconoscendo il diritto degli individui sulla propria immagine come forma di proprietà intellettuale, questo approccio offre rimedi più rapidi rispetto al contenzioso tradizionale sulla privacy.

Punti chiave:
- La strategia danese basata sul copyright
- Confronto con gli approcci regolatori UE
- Analisi legale e potenziali implicazioni
- Punti di forza e limiti del framework

🔗 https://www.nicfab.eu/it/posts/danish-copyright-deepfakes/

#Deepfakes #Copyright #IdentitàDigitale #Privacy #EULaw #Danimarca

📢 New Article on NicFab Blog

🚀 Gemini Protocol: A Human-Centric Alternative to the AI-Driven Web

In an era of AI-generated content flooding the web, pervasive tracking, and algorithmic feeds, the Gemini protocol offers a different path: mandatory encryption, no cookies, no JavaScript, and privacy by design.

This article explores:
- The history of Gemini (born 2019, NASA connection)
- Why it matters in the age of AI
- Technical overview & Gemtext format
- Advantages and limitations

I also maintain a Gemini capsule at gemini://nicfab.eu

🔗 https://www.nicfab.eu/en/posts/gemini-protocol/

#Gemini #Privacy #SmallWeb #DigitalRights #PrivacyByDesign

📢 Nuovo Articolo su NicFab Blog

🚀 Protocollo Gemini: Un'Alternativa Human-Centric al Web Dominato dall'AI

In un'epoca in cui il web è invaso da contenuti generati dall'AI, tracciamento pervasivo e feed algoritmici, il protocollo Gemini offre una strada diversa: crittografia obbligatoria, nessun cookie, nessun JavaScript e privacy by design.

L'articolo esplora:
- La storia di Gemini (nato nel 2019, connessione con la NASA)
- Perché è rilevante nell'era dell'AI
- Panoramica tecnica e formato Gemtext
- Vantaggi e limitazioni

Mantengo anche una capsula Gemini su gemini://nicfab.eu

🔗 https://www.nicfab.eu/it/posts/gemini-protocol/

#Gemini #Privacy #SmallWeb #DirittiDigitali #PrivacyByDesign

Daily Digest | 23 gennaio 2026

EDPB Document setting forth a Cooperation Procedure for the Authorisation of Contractual Clauses under Article 46(3)(...
EDPB publications
https://www.edpb.europa.eu/our-work-tools/our-documents/procedure/edpb-document-setting-forth-cooperation-procedure_en

CELEX:52026SC0011: COMMISSION STAFF WORKING DOCUMENT IMPACT ASSESSMENT REPORT Accompanying the documents Proposal for...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:52026SC0011

CELEX:52026PC0011: Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the European Union Agen...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:52026PC0011

OpenAI is coming for those sweet enterprise dollars in 2026
TechCrunch
https://techcrunch.com/2026/01/22/openai-is-coming-for-those-sweet-enterprise-dollars-in-2026/

OJ:L_202600118: Commission Delegated Regulation (EU) 2026/118 of 7 November 2025 supplementing Directive (EU) 2017/23...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:L_202600118

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 26 gennaio 2026

ChatGPT is pulling answers from Elon Musk’s Grokipedia
TechCrunch
https://techcrunch.com/2026/01/25/chatgpt-is-pulling-answers-from-elon-musks-grokipedia/

Building a Robust Risk-Based Access Control System to Combat Ransomware's Capability to Encrypt: A Machine Learning A...
cs.LG updates on arXiv.org
https://arxiv.org/abs/2601.16795

Trump’s Greenland gambit exposes Canada’s Arctic vulnerability
POLITICO
https://www.politico.com/news/2026/01/24/trump-canada-greenland-arctic-defense-00743926?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

Quotation-Based Data Retention Mechanism for Data Privacy in LLM-Empowered Network Services
cs.LG updates on arXiv.org
https://arxiv.org/abs/2503.23001

Jacobian Scopes: token-level causal attributions in LLMs
cs.CL updates on arXiv.org
https://arxiv.org/abs/2601.16407

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 27 gennaio 2026

OpenAI spills technical details about how its AI coding agent works
Ars Technica
https://arstechnica.com/ai/2026/01/openai-spills-technical-details-about-how-its-ai-coding-agent-works/

Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware
The Hacker News
https://thehackernews.com/2026/01/indian-users-targeted-in-tax-phishing.html

Crunchbase Confirms Data Breach After Hacking Claims
SecurityWeek RSS Feed
https://www.securityweek.com/crunchbase-confirms-data-breach-after-hacking-claims/

Inside OpenAI’s big play for science 
MIT Technology Review
https://www.technologyreview.com/2026/01/26/1131728/inside-openais-big-play-for-science/

‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing
SecurityWeek RSS Feed
https://www.securityweek.com/stanley-malware-toolkit-enables-phishing-via-website-spoofing/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 28 gennaio 2026

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign
SecurityWeek RSS Feed
https://www.securityweek.com/over-100-organizations-targeted-in-shinyhunters-phishing-campaign/

WhatsApp sarà sottoposto alle regole più severe del Digital Services Act europeo
Euractiv Italia
https://euractiv.it/section/digitale/news/whatsapp-sara-sottoposto-alle-regole-piu-severe-del-digital-services-act-europeo/

CELEX:02015R2378-20260101: Commission Implementing Regulation (EU) 2015/2378 of 15 December 2015 laying down detailed...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02015R2378-20260101

The Download: OpenAI’s plans for science, and chatbot age verification
MIT Technology Review
https://www.technologyreview.com/2026/01/27/1131767/the-download-openais-plans-for-science-and-chatbot-age-verification/

Chrome, Edge Extensions Caught Stealing ChatGPT Sessions
SecurityWeek RSS Feed
https://www.securityweek.com/chrome-edge-extensions-caught-stealing-chatgpt-sessions/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 29 gennaio 2026

Microsoft gained $7.6B from OpenAI last quarter
TechCrunch
https://techcrunch.com/2026/01/28/microsoft-earnings-7-6-billion-openai/

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
The Hacker News
https://thehackernews.com/2026/01/fake-moltbot-ai-coding-assistant-on-vs.html

Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
The Hacker News
https://thehackernews.com/2026/01/russian-electrum-tied-to-december-2025.html

Budapest mayor fined for organizing banned Pride march
POLITICO
https://www.politico.eu/article/budapest-mayor-gergely-karacsony-fined-for-pride-march-hungary/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

What AI “remembers” about you is privacy’s next frontier
MIT Technology Review
https://www.technologyreview.com/2026/01/28/1131835/what-ai-remembers-about-you-is-privacys-next-frontier/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 30 gennaio 2026

Happy Data Protection Day 2026!
EDPS News Feed
https://www.edps.europa.eu/press-publications/press-news/news/2026/happy-data-protection-day-2026

CELEX:32026D0179: Commission Implementing Decision (EU) 2026/179 of 26 January 2026 pursuant to Regulation (EU) 2016/...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:32026D0179

Commission opens proceedings to assist Google in complying with interoperability and online search data sharing oblig...
European Commission Press Corner
https://ec.europa.eu/commission/presscorner/detail/en/ip_26_202

Russian hybrid threats: Council sanctions six individuals over information manipulation activities
Council of the EU Press Releases
https://www.consilium.europa.eu/en/press/press-releases/2026/01/29/russian-hybrid-threats-council-sanctions-six-individuals-over-information-manipulation-activities/

Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released
The Hacker News
https://thehackernews.com/2026/01/two-ivanti-epmm-zero-day-rce-flaws.html

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 2 febbraio 2026

CELEX:52025SC1055: COMMISSION STAFF WORKING DOCUMENT Subsidiarity Grid Accompanying the document Proposal for a REGUL...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:52025SC1055

European Commission welcomes IMF Managing Director Kristalina Georgieva to College of Commissioners seminar on compet...
European Commission Press Corner
https://ec.europa.eu/commission/presscorner/detail/en/ip_26_273

Sudan: Council sanctions seven individuals in view of the dramatic escalation of violence in the country
Council of the EU Press Releases
https://www.consilium.europa.eu/en/press/press-releases/2026/01/29/sudan-council-sanctions-seven-individuals-in-view-of-the-dramatic-escalation-of-violence-in-the-country/

Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users
The Hacker News
https://thehackernews.com/2026/02/notepad-official-update-mechanism.html

OSNIP: Breaking the Privacy-Utility-Efficiency Trilemma in LLM Inference via Obfuscated Semantic Null Space
cs.LG updates on arXiv.org
https://arxiv.org/abs/2601.22752

#Privacy #AI #Cybersecurity #DailyDigest