nicfab
@nicfabnews
119 subscribers
15 photos
16 files
2.58K links
Canale di aggiornamento su Privacy, Data Protection, IA e Cybersecurity
Channel for updates on Privacy, Data Protection, AI, and Cybersecurity
Download Telegram
About
Blog
Apps
Platform
Join
nicfab
119 subscribers
nicfab
Daily Digest | 21 July 2026

OJ:L_202601755: Commission Implementing Regulation (EU) 2026/1755 of 20 July 2026 on detailed arrangements for the co...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:L_202601755

IA agentique et données personnelles : la CNIL et le Conseil de l’IA et du Numérique publient une note exploratoire
CNIL France
https://www.cnil.fr/fr/ia-agentique-cnil-cianum-note

FRA contributes to Commission’s 2026 Rule of Law Report
FRA - News
https://fra.europa.eu/en/news/2026/fra-contributes-commissions-2026-rule-law-report

SonicWall SMA1000 flaws exploited as zero-days to push custom malware
BleepingComputer
https://www.bleepingcomputer.com/news/security/sonicwall-sma1000-flaws-exploited-as-zero-days-to-push-custom-malware/

Inc Ransomware Exploits SonicWall SMA Zero-Days
Dark Reading
https://www.darkreading.com/vulnerabilities-threats/inc-ransomware-exploits-sonicwall-sma-zero-days

#Privacy #AI #Cybersecurity #DailyDigest
17 views
Add a comment
nicfab
Daily Digest | 22 July 2026

OJ:L_202601434: Commission Implementing Regulation (EU) 2026/1434 of 30 June 2026 laying down rules for the applicati...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:L_202601434

CELEX:02015R2447-20260701: Commission Implementing Regulation (EU) 2015/2447 of 24 November 2015 laying down detailed...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02015R2447-20260701

Police dismantle Kratos phishing platform, arrest developer
BleepingComputer
https://www.bleepingcomputer.com/news/security/police-dismantle-kratos-phishing-platform-arrest-developer/

OpenAI Models Escaped Containment and Hacked Hugging Face
Wired Security
https://www.wired.com/story/openai-models-escaped-containment-and-hacked-huggingface/

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
BleepingComputer
https://www.bleepingcomputer.com/news/security/fakegit-campaign-uses-7-600-github-repos-to-push-smartloader-malware/

#Privacy #AI #Cybersecurity #DailyDigest
19 views
Add a comment
nicfab
Daily Digest | 23 July 2026

Questions-réponses - recommandation relative aux pixels dans les courriers électroniques de la CNIL
CNIL France
https://www.cnil.fr/fr/faq-recommandation-pixels-courriers-electroniques

South Korea discloses data breach impacting diplomats worldwide
BleepingComputer
https://www.bleepingcomputer.com/news/security/south-korea-discloses-data-breach-impacting-diplomats-worldwide/

Study - Online fraud and fake web shops - 22-07-2026
Documents - Think Tank - European Parliament
https://www.europarl.europa.eu/thinktank/en/document/ECTI_STU(2026)772655

Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts
SecurityWeek RSS Feed
https://www.securityweek.com/suno-paidwork-data-breaches-affect-tens-of-millions-of-accounts/

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
The Hacker News
https://thehackernews.com/2026/07/ubuntu-snap-confine-flaw-could-give.html

#Privacy #AI #Cybersecurity #DailyDigest
25 views
Add a comment
nicfab
Daily Digest | 24 July 2026

OJ:L_202601744: Regulation (EU) 2026/1744 of the European Parliament and of the Council of 8 July 2026 amending Regul...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:L_202601744

21st package of sanctions: EU hits Russian energy, financial services and crypto hard
Council of the EU Press Releases
https://www.consilium.europa.eu/en/press/press-releases/2026/07/23/21st-package-of-sanctions-eu-hits-russian-energy-financial-services-and-crypto-hard/

Google hit with $1 billion in fines as EU braces for Trump battle
Ars Technica
https://arstechnica.com/tech-policy/2026/07/google-hit-with-1-billion-in-fines-as-eu-braces-for-trump-battle/

Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets
Dark Reading
https://www.darkreading.com/cyberattacks-data-breaches/russian-hackers-zimbra-zero-day-us-ukraine-targets

OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider
SecurityWeek RSS Feed
https://www.securityweek.com/openai-fixes-chatgpt-agent-flaw-that-could-let-attackers-forge-an-ai-insider/

#Privacy #AI #Cybersecurity #DailyDigest

━━━━━━━━━━━━━━━━━━━━

⚖️ EU Case-Law

🔹 AFFAIRE A.G. c. SUISSE
Judgment · 23 July 2026 · European Court of Human Rights
23 views
Add a comment
nicfab
Daily Digest | 27 July 2026

CELEX:32026R1744: Regulation (EU) 2026/1744 of the European Parliament and of the Council of 8 July 2026 amending Reg...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:32026R1744

Stakeholder event on guidelines on the interplay between data protection and competition law: save the date
EDPB News
https://www.edpb.europa.eu/news/stakeholder-event-on-guidelines-on-the-interplay-between-data-protection-and-competition-law_en

Iran: Council sanctions an additional six individuals over serious human rights violations
Council of the EU Press Releases
https://www.consilium.europa.eu/en/press/press-releases/2026/07/24/iran-council-sanctions-an-additional-six-individuals-over-serious-human-rights-violations/

OnTrac notifies customers of data breach after network hack
BleepingComputer
https://www.bleepingcomputer.com/news/security/ontrac-notifies-customers-of-data-breach-after-network-hack/

Clop ransomware targets Windchill, FlexPLM in data theft attacks
BleepingComputer
https://www.bleepingcomputer.com/news/security/clop-ransomware-targets-windchill-flexplm-in-data-theft-attacks/

#Privacy #AI #Cybersecurity #DailyDigest
20 views
Add a comment
nicfab
Daily Digest | 28 July 2026

OJ:L_202601821: Commission Implementing Regulation (EU) 2026/1821 of 27 July 2026 amending Implementing Regulation (E...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:L_202601821

Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack
SecurityWeek RSS Feed
https://www.securityweek.com/coca-cola-confirms-data-breach-after-fairlife-ransomware-attack/

COMUNICATO STAMPA - Il Garante privacy sanziona Lusha per 2 milioni di euro. Monitorati e in vendita i dati di un ele...
Garante Protezione dei dati personali - news
https://www.gpdp.it/garante/doc.jsp?ID=10275230

Hackers target US firms in FastJson RCE zero-day attacks
BleepingComputer
https://www.bleepingcomputer.com/news/security/hackers-target-us-firms-in-fastjson-rce-zero-day-attacks/

Arista patches VeloCloud Orchestrator zero-day exploited in attacks
BleepingComputer
https://www.bleepingcomputer.com/news/security/arista-patches-velocloud-orchestrator-zero-day-exploited-in-attacks/

#Privacy #AI #Cybersecurity #DailyDigest
20 views
Add a comment
nicfab
Daily Digest | 29 July 2026

CELEX:02020D1999-20260713: Council Decision (CFSP) 2020/1999 of 7 December 2020 concerning restrictive measures again...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02020D1999-20260713

OpenAI’s rogue models roamed the internet for 4 days and staged a second attack
Technology – POLITICO
https://www.politico.com/news/2026/07/28/openai-rogue-models-hugging-face-breach-01014572?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face
Wired Security
https://www.wired.com/story/openais-rogue-ai-agent-hacked-more-than-just-hugging-face/

OpenAI models used Artifactory zero-days to escape to the internet
BleepingComputer
https://www.bleepingcomputer.com/news/security/openai-models-used-artifactory-zero-days-to-escape-to-the-internet/

CELEX:02024R2642-20260713: Council Regulation (EU) 2024/2642 of 8 October 2024 concerning restrictive measures in vie...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02024R2642-20260713

#Privacy #AI #Cybersecurity #DailyDigest
18 views
Add a comment
nicfab
Daily Digest | 30 July 2026

NEWSLETTER del 29 luglio 2026 - Dal Garante privacy sanzione di 460mila a Piaggio ＆ C. Spa - Marketing: il Garante sa...
Garante Protezione dei dati personali - news
https://www.gpdp.it/garante/doc.jsp?ID=10275843

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
BleepingComputer
https://www.bleepingcomputer.com/news/security/russian-hackers-exploit-exchange-owa-zero-day-for-long-term-mailbox-access/

Cisco warns of FMC static credential flaw exploited in zero-day attacks
BleepingComputer
https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/

JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack
SecurityWeek RSS Feed
https://www.securityweek.com/jfrog-zero-days-exploited-in-openai-hugging-face-hack/

Critical VM Escape Vulnerability Patched in VMware ESXi
SecurityWeek RSS Feed
https://www.securityweek.com/critical-vm-escape-vulnerability-patched-in-vmware-esxi/

#Privacy #AI #Cybersecurity #DailyDigest
16 views
Add a comment
nicfab
https://www.nicfab.eu/en/posts/ai-act-2-august-2026/
NicFab Blog — Privacy, GDPR & Artificial Intelligence
AI Act: What Becomes Enforceable on 2 August 2026
What part of the AI Act becomes enforceable on 2 August 2026 after Regulation (EU) 2026/1744: a chapter-by-chapter reconstruction of Article 113 as amended, and the asymmetry between supervision and requirements.
20 views
Add a comment
nicfab
https://www.nicfab.eu/it/posts/ai-act-2-august-2026/
NicFab Blog — Privacy, GDPR & Intelligenza Artificiale
AI Act: che cosa diventa esigibile il 2 agosto 2026
Che cosa dell'AI Act diventa esigibile il 2 agosto 2026 dopo il Regolamento (UE) 2026/1744: ricostruzione capo per capo dell'articolo 113 come modificato, con l'asimmetria fra vigilanza e requisiti.
18 views
Add a comment
nicfab
Daily Digest | 31 July 2026

Joint letter of the CIS SCG and the CSC to the European Commission
EDPB publications
https://www.edpb.europa.eu/csc/documents/letters/joint-letter-of-the-cis-scg-and-the-csc-to-the-european-commission_en

Scam centres in Southeast Asia: EU lists seven persons and three entities responsible for serious human rights violat...
Council of the EU Press Releases
https://www.consilium.europa.eu/en/press/press-releases/2026/07/30/scam-centres-in-southeast-asia-eu-lists-seven-persons-and-three-entities-responsible-for-serious-human-rights-violations/

AI Act: per il Garante Privacy schema di decreto da correggere
Ipsoa area diritto in primo piano
https://www.ipsoa.it/documents/quotidiano/2026/07/30/act-garante-privacy-schema-decreto-correggere

South Korea fines telco giant KT $39 million for customer data breach
BleepingComputer
https://www.bleepingcomputer.com/news/security/south-korea-fines-telco-giant-kt-39-million-for-customer-data-breach/

Cisco Secure FMC Zero-Day Exploited in the Wild
SecurityWeek RSS Feed
https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/

#Privacy #AI #Cybersecurity #DailyDigest
18 views
Add a comment
nicfab
Daily Digest | 3 August 2026

COMUNICATO STAMPA - Telemarketing, il Garante privacy sanziona Tim per 9,5 milioni di euro. Consensi acquisiti illeci...
Garante Protezione dei dati personali - news
https://www.gpdp.it/garante/doc.jsp?ID=10277228

CELEX:52026DC0411: REPORT FROM THE COMMISSION TO THE COUNCIL AND THE EUROPEAN PARLIAMENT 37th Annual Report on the pr...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:52026DC0411

EU to Crack Down on AI Deepfakes, Illicit Imagery and Hacking With New Team in Brussels
SecurityWeek RSS Feed
https://www.securityweek.com/eu-to-crack-down-on-ai-deepfakes-illicit-imagery-and-hacking-with-new-team-in-brussels/

Amgen says cloud data breach exposed patient health, proprietary info
BleepingComputer
https://www.bleepingcomputer.com/news/security/amgen-says-cloud-data-breach-exposed-patient-health-proprietary-info/

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
The Hacker News
https://thehackernews.com/2026/08/hijacked-hotel-wi-fi-pushes-fake.html

#Privacy #AI #Cybersecurity #DailyDigest
17 views
Add a comment
nicfab
https://www.nicfab.eu/en/posts/ai-office-enforcement-powers/
NicFab Blog — Privacy, GDPR & Artificial Intelligence
The AI Office Becomes an Enforcement Authority: Articles 75a to 75d
The new Articles 75a, 75b, 75c and 75d of the AI Act: the AI Office's inspection powers, commitments, fines and periodic penalty payments after Regulation (EU) 2026/1744.
14 views
Add a comment
nicfab
https://www.nicfab.eu/it/posts/ai-office-enforcement-powers/
NicFab Blog — Privacy, GDPR & Intelligenza Artificiale
L'AI Office diventa autorità di enforcement: gli articoli da 75 bis a 75 quinquies
I nuovi articoli 75 bis, 75 ter, 75 quater e 75 quinquies dell'AI Act: poteri ispettivi, impegni, sanzioni e penalità di mora dell'ufficio per l'IA dopo il Regolamento (UE) 2026/1744.
16 views
Add a comment
nicfab
Daily Digest | 4 August 2026

EDPB Letter to the European Commission on US Supreme Court judgment Trump v. Slaughter
EDPB publications
https://www.edpb.europa.eu/documents/edpb-correspondence/edpb-letter-to-the-european-commission-on-us-supreme-court-judgment_en

CELEX:02024R1689-20260727: Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 la...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02024R1689-20260727

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
The Hacker News
https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks
SecurityWeek RSS Feed
https://www.securityweek.com/recent-sonicwall-vulnerabilities-exploited-in-ransomware-attacks/

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
The Hacker News
https://thehackernews.com/2026/07/hollowframe-loader-deploys-matryoshka.html

#Privacy #AI #Cybersecurity #DailyDigest
15 views
Add a comment
nicfab
Daily Digest | 5 August 2026

OJ:C_202603690: P10_TA(2026)0014 – Human rights and democracy in the world and the European Union’s policy on the mat...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:C_202603690

OJ:C_202603697: P10_TA(2026)0022 – European technological sovereignty and digital infrastructure – European Parliamen...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:C_202603697

Stakeholder event on guidelines on the interplay between data protection and competition law: express your interest
EDPB News
https://www.edpb.europa.eu/news/stakeholder-event-on-guidelines-on-the-interplay-between-data-protection-and-competition-law-0_en

150,000 Impacted by Madera Community Hospital Data Breach
SecurityWeek RSS Feed
https://www.securityweek.com/150000-impacted-by-madera-community-hospital-data-breach/

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks
SecurityWeek RSS Feed
https://www.securityweek.com/decades-old-bmc-vulnerability-exposes-thousands-of-data-centers-to-attacks/

#Privacy #AI #Cybersecurity #DailyDigest
16 views
Add a comment
nicfab
Daily Digest | 6 August 2026

Collège de la CNIL : 5 nouveaux membres nommés le 2 août 2026
CNIL France
https://www.cnil.fr/fr/college-de-la-cnil-5-nouveaux-membres-nommes-le-2-aout-2026

CELEX:52026IP0022: P10_TA(2026)0022 – European technological sovereignty and digital infrastructure – European Parlia...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:52026IP0022

Ransom Cartel ransomware creator sentenced to 16 years in prison
BleepingComputer
https://www.bleepingcomputer.com/news/security/ransom-cartel-ransomware-creator-sentenced-to-16-years-in-prison/

311,000 Impacted by Brown Health Medical Group-MA Data Breach
SecurityWeek RSS Feed
https://www.securityweek.com/311000-impacted-by-brown-health-medical-group-ma-data-breach/

Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data 
SecurityWeek RSS Feed
https://www.securityweek.com/cybersecurity-alliance-drafts-safe-guidelines-for-sharing-ai-incident-data/

#Privacy #AI #Cybersecurity #DailyDigest
18 views
Add a comment
nicfab
Daily Digest | 7 August 2026

OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
BleepingComputer
https://www.bleepingcomputer.com/news/artificial-intelligence/openai-rolls-out-a-major-chatgpt-upgrade-even-if-you-dont-pay-for-it/

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes
The Hacker News
https://thehackernews.com/2026/08/openai-disrupts-poipet-scam-network.html

CELEX:52026SC0616: COMMISSION STAFF WORKING DOCUMENT IMPACT ASSESSMENT REPORT Accompanying the documents Proposal for...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:52026SC0616

CELEX:02024X0211-20240112: UN Regulation No 168 – Uniform provisions concerning the approval of light duty passenger ...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02024X0211-20240112

CELEX:02023R1230-20260727: Regulation (EU) 2023/1230 of the European Parliament and of the Council of 14 June 2023 on...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:02023R1230-20260727

#Privacy #AI #Cybersecurity #DailyDigest
18 views
Add a comment
nicfab
Daily Digest | 10 August 2026

COMUNICATO STAMPA - Dal Garante privacy stop ai deepfake satirici su Enrico Mentana. Ammonita R.T.I. per alcuni video...
Garante Protezione dei dati personali - news
https://www.gpdp.it/garante/doc.jsp?ID=10281135

CELEX:52026IP0014: P10_TA(2026)0014 – Human rights and democracy in the world and the European Union’s policy on the ...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=CELEX:52026IP0014

3.8 Million Impacted by Unlimited Technology Systems Data Breach
SecurityWeek RSS Feed
https://www.securityweek.com/3-8-million-impacted-by-unlimited-technology-systems-data-breach/

Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
SecurityWeek RSS Feed
https://www.securityweek.com/zero-click-ai-browser-hacking-claude-and-chatgpt-atlas-hijacked-via-emails-x-posts/

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service
The Hacker News
https://thehackernews.com/2026/08/ransom-cartel-creator-gets-16-years-in.html

#Privacy #AI #Cybersecurity #DailyDigest
20 views
Add a comment
nicfab
Daily Digest | 11 August 2026

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs
BleepingComputer
https://www.bleepingcomputer.com/news/security/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs/

A data breach at shipping giant Ceva Logistics is rippling across banks, retailers, Steam gamers, and beyond
TechCrunch
https://techcrunch.com/2026/08/10/a-data-breach-at-shipping-giant-ceva-logistics-is-rippling-across-banks-retailers-steam-gamers-and-beyond/

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
The Hacker News
https://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.html

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data
SecurityWeek RSS Feed
https://www.securityweek.com/critical-one-click-vulnerability-in-atlassians-rovo-ai-exposed-enterprise-data/

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
The Hacker News
https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html

#Privacy #AI #Cybersecurity #DailyDigest
14 views
Add a comment