privacy

In its iOS, iPadOS, macOS and visionOS 27 releases, WebKit blocks network access to identity resolution services at the domain level, so they cannot receive users' email addresses.

HEIR compiles pre-trained AI models to run inference on fully homomorphic encrypted data, letting servers process private data without decrypting it.

As of August 1, nearly 600 California-registered data brokers must start processing consumer deletion requests through the state's DROP platform or face uncapped $200-a-day fines.

An unauthenticated API flaw in the Pope's official prayer app exposed names, emails, and birth dates of over 719,000 users for six months before a fix.

Federal prosecutors have charged Atlanta activist Samuel Tunick under a rarely used destruction-of-property statute for allegedly wiping his phone with GrapheneOS's duress password during a border search.

A breach at gig-work platform Paidwork exposed names, bank details, and bcrypt-hashed passwords for over 23 million users, per Have I Been Pwned.

A 42-attorney-general coalition settled bankruptcy claims against 23andMe for $18 million over the 2023 breach of 6.9 million genetic profiles, days after a court barred California from separately pursuing damages.

Meta is rolling out a mandatory update that disables its smart glasses' camera if the privacy LED is tampered with, even as it reportedly tests always-on glasses that would skip the light entirely.

New York's Unified Court System will bar recording-capable eyewear from its 1,240-plus courts starting July 20, the first statewide blanket ban of its kind.

A cyberattack on the UN World Food Programme's Palestine registration app exposed personal data of about 600,000 Gaza households, drawing criticism over a 17-day notification delay.

An EFF analysis of millions of Flock Safety ALPR searches reveals law enforcement using crime-fighting surveillance tools for school residency fraud checks, employment background investigations, and noise complaints — with no warrant required.

The FTC settled for $930,000 total after CMG and two partners falsely claimed their 'Active Listening' service captured real-time smart-device voice data to deliver hyper-local ads — it was actually resold email lists.