Australia's eSafety Commission says sites must take reasonable steps to stop VPN use for age checks. The next target after identity is the tool that protects you from it.

WA Police live facial recognition scanned 131,000 faces in a week. The privacy regulator was never consulted and the law had not commenced.

Origin Energy disclosed a breach affecting 4.8 million customers. Contact details, dates of birth and billing history sat in a database no power company needs to hold.

LAPD's own auditor found 161 innocent drivers flagged as car thieves by stale plate reader data. The department let its Flock contract expire.

The UK will require a face scan or ID to open a social media account, building a national identity database experts say will not protect children.

The FBI is paying $36 million to query a private license plate network covering all 50 states, with no warrant requirement.

Section 702 lets the NSA collect your communications without a warrant. Congress extended it again and stripped every reform proposal before the vote.

Microsoft encrypted the Windows Recall database after TotalRecall stripped it bare in 2024. TotalRecall Reloaded found the side entrance anyway.

An independent audit found Google honored opt-out signals 13% of the time. Meta and Microsoft were not much better. The opt-out system is working exactly as designed.

CPUID's website was compromised on April 9 2026 and served trojaned CPU-Z and HWMonitor installers for six hours before anyone at the company noticed.

The FBI pulled deleted Signal messages from an iPhone notification database. Signal's encryption worked. iOS kept the evidence anyway.

Using LLMs for therapy exposes the most sensitive personal data to tech companies that store, analyze, and reuse conversations.

Russia's VPN crackdown overloaded Roskomnadzor's filtering systems and took down national banking payments. It's the second time this has happened.

Google Nest routers have no local admin interface. Basic settings require cloud access, a Google account, and sending your home network data to Google's servers.

Apple age verification is now live in the UK, Singapore, and South Korea. Each rollout is framed as local compliance. The privacy cost is global and cumulative.

Quad9 routes your DNS queries through Switzerland, blocks malicious domains, and doesn't log your IP. Here's what it does and where it stops.

A rootkit hidden in 50+ Google Play apps was downloaded 2.3 million times. It survives factory resets and clones your WhatsApp session.

Apple almost never backports security patches. It did for DarkSword twice in a month. Here's why

Phil Zimmermann created PGP in 1991 and faced criminal investigation for giving ordinary people strong encryption the government called a weapon.

Every photo contains GPS coordinates, timestamps, and device info. Here's how to strip metadata before sharing anything.

Angela Lipps spent 108 days in jail because facial recognition software was wrong. She lost her home, car, and dog. Nobody apologized.

Navia Benefit Solutions breach exposed Social Security numbers for 2.7 million people. Hackers had access for 25 days before detection.

Meta Ray-Bans record naked people, credit cards, and sex acts. Thousands of contractors in Kenya review all footage for AI training.

KadNap botnet infected 14,000 routers with malware that uses distributed hash tables to resist takedowns and carry cybercrime traffic.

Pornhub blocked Australia rather than collect facial scans and IDs. VPN downloads surged as Australians refused government surveillance.

Ring canceled its Flock Safety partnership after users threatened to smash cameras. Leaked email shows founder wants Search Party to

Criminals flood small businesses with fake one-star reviews then demand payment to stop. 94% of consumers avoid businesses with bad reviews.