Daily Digest | 18 August 2026

680,000 Impacted by French Tax Authority Data Breach
SecurityWeek RSS Feed
https://www.securityweek.com/680000-impacted-by-french-tax-authority-data-breach/

Philips and GE investigating Clop ransomware data theft claims
BleepingComputer
https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims/

Microsoft working on Defender patch for ShieldBreak zero-day
BleepingComputer
https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure
SecurityWeek RSS Feed
https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
The Hacker News
https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 19 August 2026

Statement by the High Representative on behalf of the EU on the alignment of certain countries concerning restrictiv...
Council of the EU Press Releases
https://www.consilium.europa.eu/en/press/press-releases/2026/08/18/statement-by-the-high-representative-on-behalf-of-the-eu-on-the-alignment-of-certain-countries-concerning-restrictive-measures-against-serious-human-rights-violations-and-abuses/

French tax authority data breach affects 678,000 individuals
BleepingComputer
https://www.bleepingcomputer.com/news/security/french-tax-authority-data-breach-affects-678-000-individuals/

CISA: Windows Task Host flaw now exploited by ransomware gangs
BleepingComputer
https://www.bleepingcomputer.com/news/security/cisa-windows-task-host-flaw-now-exploited-by-ransomware-gangs/

Heights Finance Data Breach Impacts at Least 1.2 Million Individuals
SecurityWeek RSS Feed
https://www.securityweek.com/heights-finance-data-breach-impacts-at-least-1-2-million-individuals/

France probes disinfo campaigns targeting 2027 election candidates
POLITICO
https://www.politico.eu/article/france-probe-russia-disinformation-campaigns-2027-election/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 20 August 2026

OpenAI confirms ChatGPT is down as logins and signups fail
BleepingComputer
https://www.bleepingcomputer.com/news/artificial-intelligence/openai-confirms-chatgpt-is-down-as-logins-and-signups-fail/

OpenAI seeks to one-up Anthropic with new customer privacy protections
TechCrunch
https://techcrunch.com/2026/08/19/openai-seeks-to-one-up-anthropic-with-new-customer-privacy-protections/

Rogue ransomware affiliate poses as data recovery firm to steal payments
BleepingComputer
https://www.bleepingcomputer.com/news/security/rogue-ransomware-affiliate-ransom-busters-poses-as-data-recovery-firm/

Rogue ransomware affiliate poses as recovery firm to steal payments
BleepingComputer
https://www.bleepingcomputer.com/news/security/rogue-ransomware-affiliate-ransom-busters-poses-as-recovery-firm/

Healthtech firm CareCloud data breach impacts 3.7 million patients
BleepingComputer
https://www.bleepingcomputer.com/news/security/healthtech-firm-carecloud-data-breach-impacts-37-million-patients/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 21 August 2026

CISA: Medusa ransomware hit over 500 critical infrastructure orgs
BleepingComputer
https://www.bleepingcomputer.com/news/security/cisa-medusa-ransomware-hit-over-500-critical-infrastructure-orgs/

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Hacker News
https://thehackernews.com/2026/08/rust-supply-chain-attack-puts-build.html

Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
SecurityWeek RSS Feed
https://www.securityweek.com/cl0p-ransomware-group-names-over-40-victims-of-ptc-windchill-campaign/

MLflow Vulnerability Exploited for Cloud Credential Theft
SecurityWeek RSS Feed
https://www.securityweek.com/mlflow-vulnerability-exploited-for-cloud-credential-theft/

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
The Hacker News
https://thehackernews.com/2026/08/ai-generated-exploit-scripts-target.html

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 24 August 2026

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
The Hacker News
https://thehackernews.com/2026/08/tiktok-agrees-to-400-million-settlement.html

Microsoft Patches Exploited Entra ID Vulnerability
SecurityWeek RSS Feed
https://www.securityweek.com/microsoft-rolls-out-22-fresh-security-patches/

Brussels changes gear on Big Tech enforcement
Politico EU Technology
https://www.politico.eu/article/brussels-changes-gear-on-big-tech-enforcement-as-first-wave-of-cases-wraps-up/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

SickKids data breach exposes employee and job applicant info
BleepingComputer
https://www.bleepingcomputer.com/news/security/sickkids-data-breach-exposes-employee-and-job-applicant-info/

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets
SecurityWeek RSS Feed
https://www.securityweek.com/new-phishing-toolkit-uses-passkeys-to-maintain-access-after-password-resets/

#Privacy #AI #Cybersecurity #DailyDigest

📬 NicFab Newsletter #35 | 25 agosto 2026

Privacy, Data Protection, AI e Cybersecurity — la rassegna settimanale.

In questo numero:

🏛️ La Commissione europea mette a gara uno studio empirico da 400.000 euro sul design dei marketplace e sull'effettività dei meccanismi DSA (artt. 16, 30.7 e 31)

📖 Parere EDPS 17/2026 sulla revisione del Regolamento 2018/1725 trasmesso alle delegazioni del Consiglio, con riunione del Working Party on Data Protection il 4 settembre

🟢 La CNIL pubblica una guida per i cittadini sul rifiuto del credito: scoring, FICP, trasparenza degli algoritmi e diritto a conoscere le ragioni del diniego

🔴 DMA: 890 milioni di euro a Google per self-preferencing su Search e restrizioni allo steering su Play, mentre Bruxelles cambia marcia sull'enforcement Big Tech

📈 Apple e Commissione trovano l'intesa sui termini App Store UE: commissione IAP dal 30 al 26 percento dal 1° ottobre 2026

⚠️ Grok esfiltra dati utente tramite istruzioni cifrate, "mind virus" tra agenti AI via file di prompt persistenti e Copilot rivela da sé il parametro segreto per attaccarlo

🔍 Cybersecurity: GitLab CVE-2026-19478 sfruttata in poche ore, Zimbra RCE non autenticato già in KEV e 14 pacchetti npm trojanizzati distribuiscono RedC2 4.0

📊 TikTok paga 400 milioni per violazioni COPPA, la FTC prepara limiti al surveillance pricing e Aylo chiude con 120 milioni le class action su CSAM

📖 AI Act in Pillole - Parte 35: l'articolo 39 e gli organismi di valutazione della conformità di paesi terzi

👉 Leggi il numero completo: https://www.nicfab.eu/it/newsletter-issues/2026-08-25-issue-35/?utm_source=telegram&utm_medium=organic-social&utm_campaign=issue-35

📩 Iscriviti alla newsletter: https://www.nicfab.eu/it/pages/newsletter/#iscriviti-ora

#Privacy #GDPR #AIAct #Cybersecurity

📬 NicFab Newsletter #35 | August 25, 2026

Privacy, Data Protection, AI & Cybersecurity — weekly review.

In this issue:

🏛️ The European Commission tenders a EUR 400,000 empirical study on how marketplace design shapes user behaviour under DSA Articles 16, 30(7) and 31

📖 EDPS Opinion 17/2026 on the revision of Regulation 2018/1725 sent to Council delegations, ahead of the Working Party meeting on 4 September

🟢 CNIL publishes a citizens' guide on credit refusals: no "right to credit", but transparency, bias mitigation and explainability duties apply to AI scoring models

🔴 Brussels changes gear on Big Tech: EUR 890 million in DMA fines against Google for self-preferencing and Play Store restrictions, bringing total DMA penalties to EUR 1.6 billion

📈 Apple reshapes App Store terms for EU developers from 1 October 2026: commission down to 26%, Core Technology Fee replaced by a 5% Core Technology Commission

⚠️ Cybersecurity week: GitLab CVE-2026-19478 exploited within hours, unauthenticated RCE in Zimbra already in KEV, and 14 trojanized npm packages delivering RedC2 4.0

🔍 AI security under pressure: Grok exfiltrating user data via encrypted instructions, Copilot disclosing the secret parameter used to attack it, and OpenAI pausing frontier RL training

📊 TikTok pays USD 400 million for COPPA violations while the FTC prepares limits on surveillance pricing

👉 Read the full issue: https://www.nicfab.eu/en/newsletter-issues/2026-08-25-issue-35/?utm_source=telegram&utm_medium=organic-social&utm_campaign=issue-35

📩 Subscribe to the newsletter: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now

#Privacy #GDPR #AIAct #Cybersecurity

Daily Digest | 25 August 2026

Foul Language: WordlistLoader Disguises Malware as Ordinary Text
Dark Reading
https://www.darkreading.com/data-privacy/wordlistloader-disguises-malware-ordinary-text

Alabama launches investigation into OpenAI’s hack of Hugging Face
TechCrunch
https://techcrunch.com/2026/08/24/alabama-launches-investigation-into-openais-hack-of-hugging-face/

Instinct’s powerful AI assistant is raising privacy and security concerns
TechCrunch
https://techcrunch.com/2026/08/24/instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns/

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
The Hacker News
https://thehackernews.com/2026/08/weedhack-malware-spreads-via-fake.html

Tricky 'SynkLoader' Multitool May Herald Ransomware
Dark Reading
https://www.darkreading.com/threat-intelligence/tricky-synkloader-multitool-ransomware

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 26 August 2026

Décisions automatisées : sanction de près de 825 millions d’euros à l’encontre d’UBER
CNIL France
https://www.cnil.fr/fr/decisions-automatisees-sanction-de-pres-de-825-millions-deuros-lencontre-duber

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The Hacker News
https://thehackernews.com/2026/08/us-sanctions-iran-linked-hackers-behind.html

CISA Warns of Exploited Oracle WebLogic Vulnerability
SecurityWeek RSS Feed
https://www.securityweek.com/cisa-warns-of-exploited-oracle-weblogic-vulnerability/

Personal Information Exposed in Apollo Global Data Breach
SecurityWeek RSS Feed
https://www.securityweek.com/personal-information-exposed-in-apollo-global-data-breach/

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
The Hacker News
https://thehackernews.com/2026/08/whatsapp-adds-multiple-passkeys-for.html

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 27 August 2026

Nigel Farage wants to scrap GDPR for the UK
Politico EU Technology
https://www.politico.eu/article/nigel-farage-wants-to-scrap-gdpr-for-the-uk/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

Microsoft tests new privacy controls for Windows 11 desktop apps
BleepingComputer
https://www.bleepingcomputer.com/news/microsoft/microsoft-tests-new-privacy-controls-for-windows-11-desktop-apps/

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
The Hacker News
https://thehackernews.com/2026/08/fbi-disrupts-china-linked-qtfy.html

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown
The Hacker News
https://thehackernews.com/2026/08/interpol-operation-jackal-iv-arrests-58.html

CISA Warns of Exploited Gitea Vulnerability
SecurityWeek RSS Feed
https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 28 August 2026

Poland asks EU to fine Meta €250 million over scam ads
POLITICO
https://www.politico.eu/article/polish-deputy-pm-krzysztof-gawkowski-says-eu-should-fine-meta-250-million-for-financial-scams/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

AFFAIRE PRONTO INTERVENTI SIDA DI BUTERA FRANCESCO c. ITALIE
ECHR HUDOC Most recent Chamber judgments ＆ decisions (includes Importance Levels: Key cases， 1 ＆ 2)
https://hudoc.echr.coe.int/eng?i=001-251826

Carhartt data breach exposes information of 12.9 million accounts
BleepingComputer
https://www.bleepingcomputer.com/news/security/carhartt-data-breach-exposes-information-of-129-million-accounts/

US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks
SecurityWeek RSS Feed
https://www.securityweek.com/us-disrupts-chinese-hacking-platform-used-in-military-and-critical-infrastructure-attacks/

PaperCut warns of NG, MF flaw exploited in zero-day attacks
BleepingComputer
https://www.bleepingcomputer.com/news/security/papercut-warns-of-ng-mf-flaw-exploited-in-zero-day-attacks/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 31 August 2026

PI_COM:Ares(2026)7790141: Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on revision of the ...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=PI_COM:Ares(2026)7790141

IA : la CNIL met à jour son outil de traçabilité des modèles publiés en source ouverte
CNIL France
https://www.cnil.fr/fr/ia-la-cnil-met-jour-son-outil-de-tracabilite-des-modeles-publies-en-source-ouverte

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage
BleepingComputer
https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-warns-infostealer-malware-is-hijacking-claude-sessions-to-drain-usage/

Hasbro Data Breach Exposed Employee Personal Information
SecurityWeek RSS Feed
https://www.securityweek.com/hasbro-data-breach-exposed-employee-personal-information/

ATF Confirms Cyber Incident After Ransomware Group Claims Attack
SecurityWeek RSS Feed
https://www.securityweek.com/atf-confirms-cyber-incident-after-ransomware-group-claims-attack/

#Privacy #AI #Cybersecurity #DailyDigest

📬 NicFab Newsletter #36 | 1 settembre 2026

Privacy, Data Protection, AI e Cybersecurity — la rassegna settimanale.

In questo numero:

🔴 Uber sanzionata per 824,99 milioni di euro dall'autorità olandese, in cooperazione con la CNIL, per le disattivazioni automatizzate degli account degli autisti ex art. 22 GDPR

🏛️ In Gazzetta ufficiale l'approvazione del Parlamento europeo alla Convenzione quadro del Consiglio d'Europa sull'IA, primo trattato internazionale vincolante in materia

📖 Deroga ePrivacy e abusi sui minori: pubblicati gli emendamenti di marzo, ma il quadro vigente è ora il Regolamento (UE) 2026/1881, applicabile fino al 3 aprile 2028

🟢 Diritto d'autore e IA generativa: la risoluzione del Parlamento chiede trasparenza sui dati di training, licenze collettive settoriali e opt-out leggibili dalle macchine

📊 Codice doganale dell'Unione: la posizione del Consiglio in prima lettura introduce l'EU Customs Authority e l'EU Customs Data Hub, con rilevanti profili di data protection

⚠️ McKesson conferma il data breach, ShinyHunters rivendica 284 milioni di record; Berlino rifiuta il riscatto dopo l'attacco alla rete amministrativa

🔍 DMA e nuovi termini Apple: la Commissione accetta le modifiche, ma restano le critiche; la Polonia chiede a Bruxelles 250 milioni di multa a Meta per le pubblicità truffa

📈 AI Act in Pillole — Parte 36: l'articolo 40 su norme armonizzate, presunzione di conformità e richieste di normazione della Commissione

👉 Leggi il numero completo: https://www.nicfab.eu/it/newsletter-issues/2026-09-01-issue-36/?utm_source=telegram&utm_medium=organic-social&utm_campaign=issue-36

📩 Iscriviti alla newsletter: https://www.nicfab.eu/it/pages/newsletter/#iscriviti-ora

#Privacy #GDPR #AIAct #Cybersecurity

📬 NicFab Newsletter #36 | September 1, 2026

Privacy, Data Protection, AI & Cybersecurity — weekly review.

In this issue:

🔴 Uber fined €824.99 million by the Dutch DPA, in cooperation with the CNIL, for automated driver account deactivations under Article 22 GDPR

🏛️ Council of Europe Framework Convention on AI: the European Parliament's consent published in the Official Journal, paving the way for the Council's conclusion

📖 AI Act Explained – Part 36: Article 40 on harmonized standards, the presumption of conformity and the Commission's standardization requests

⚖️ ePrivacy derogation and child abuse: March amendments published in the OJ, but the framework in force is now Regulation (EU) 2026/1881, which excludes end-to-end encrypted communications

🟢 Copyright and generative AI: Parliament calls for transparency on training data, sector-based collective licensing and machine-readable opt-out tools

🔍 DMA and Apple's new terms: the Commission accepts the changes while Poland asks Brussels to fine Meta €250 million over scam ads

⚠️ McKesson confirms breach with ShinyHunters claiming 284 million records, while Berlin refuses to pay ransom after the attack on its administrative network

📊 Union Customs Code: the Council's first-reading position introduces the EU Customs Data Hub and a new European Customs Authority

👉 Read the full issue: https://www.nicfab.eu/en/newsletter-issues/2026-09-01-issue-36/?utm_source=telegram&utm_medium=organic-social&utm_campaign=issue-36

📩 Subscribe to the newsletter: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now

#Privacy #GDPR #AIAct #Cybersecurity

Daily Digest | 1 September 2026

Berlin confirms data theft after Rhysida ransomware attack claims
BleepingComputer
https://www.bleepingcomputer.com/news/security/berlin-confirms-data-theft-after-rhysida-ransomware-attack-claims/

McKesson Confirms Data Breach as Attacker Deadline Looms
SecurityWeek RSS Feed
https://www.securityweek.com/mckesson-confirms-data-breach-as-attacker-deadline-looms/

Anthropic Users Hit by Infostealer Attacks, Session Thefts
Dark Reading
https://www.darkreading.com/cyberattacks-data-breaches/anthropic-users-infostealer-attacks-session-thefts

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
The Hacker News
https://thehackernews.com/2026/08/north-korean-job-fraud-expands-beyond.html

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
The Hacker News
https://thehackernews.com/2026/08/openai-says-reward-hacking-drove-ai.html

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 2 September 2026

OJ:C_202603923: Council Recommendation of 10 July 2026 on the economic, social, employment, structural and budgetary ...
EUR-Lex | AI Act | EN
https://eur-lex.europa.eu/legal-content/AUTO/?uri=OJ:C_202603923

Aesto Health says data breach affects over 9.5 million patients
BleepingComputer
https://www.bleepingcomputer.com/news/security/aesto-health-says-data-breach-affects-over-95-million-patients/

Extortion Group Claims Manchester Airports Group Data Breach
SecurityWeek RSS Feed
https://www.securityweek.com/extortion-group-claims-manchester-airports-group-data-breach/

Critical Langflow flaw exploited to steal OpenAI and AWS keys
BleepingComputer
https://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
The Hacker News
https://thehackernews.com/2026/08/aurora-ransomware-operators-use-cursor.html

#Privacy #AI #Cybersecurity #DailyDigest

━━━━━━━━━━━━━━━━━━━━

⚖️ EU Case-Law

🔹 CASE OF MANKUS v. LITHUANIA
Judgment · 1 September 2026 · European Court of Human Rights

Daily Digest | 3 September 2026

UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
SecurityWeek RSS Feed
https://www.securityweek.com/uk-moves-to-block-high-risk-tech-suppliers-from-critical-infrastructure/

TikTok ban divides European Commission
POLITICO
https://www.politico.eu/article/tiktok-ban-divides-european-commission/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
Dark Reading
https://www.darkreading.com/vulnerabilities-threats/sonicwall-sma-1000-zero-days-unauthenticated-rce

9.5 Million Impacted by Aesto Health Data Breach
SecurityWeek RSS Feed
https://www.securityweek.com/9-5-million-impacted-by-aesto-health-data-breach/

Sality botnet infrastructure dismantled in joint global takedown
BleepingComputer
https://www.bleepingcomputer.com/news/security/sality-botnet-infrastructure-dismantled-in-joint-global-takedown/

#Privacy #AI #Cybersecurity #DailyDigest

Daily Digest | 4 September 2026

Violation de données en matière de santé : sanction de 500 000 euros à l’encontre de l’HÔPITAL PRIVÉ DE LA LOIRE
CNIL France
https://www.cnil.fr/fr/sanction-hopital-prive-loire

French hospital fined €500,000 after breach exposes data of 727,000
BleepingComputer
https://www.bleepingcomputer.com/news/security/french-hospital-fined-500-000-after-breach-exposes-data-of-727-000/

ChatGPT soumis à de nouvelles règles européennes aux multiples angles morts
POLITICO
https://www.politico.eu/article/chatgpt-soumis-a-de-nouvelles-regles-europeennes-aux-multiples-angles-morts/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication

Judgment Sylvie Vallée v. France - Confiscation of jointly owned property following conviction of applicant’s husband...
ECHR HUDOC Most recent Chamber judgments ＆ decisions (includes Importance Levels: Key cases， 1 ＆ 2)
https://hudoc.echr.coe.int/eng?i=003-8622007-12278498

OpenAI’s Astra Crosses ‘Critical’ Cyber Threshold After Finding Zero-Days
SecurityWeek RSS Feed
https://www.securityweek.com/openais-astra-becomes-first-model-to-cross-critical-cybersecurity-threshold/

#Privacy #AI #Cybersecurity #DailyDigest