A researcher at security firm NorForge has discovered that a Chinese-speaking criminal launched autonomous AI agents through Carin, a general-purpose problem-solving engine that can coordinate AI agents for a specific task, including penetration testing, toward 1,200 targeted sites, and was
Latest from Data Privacy + Cybersecurity Insider - Page 2
Privacy Tip #513 – Driver’s License Breach Can Lead to Fraud
There is a reason why every single state data breach notification law in the United States requires organizations to notify individuals in the event a driver’s license has been compromised. And I have two real life stories to show why
DOJ Makes Progress in Dismantling N. Korean IT Worker Fraud Scheme
On October 13, 2026, the Department of Justice (DOJ) announced that it made two arrests, searched multiple laptop farms, and seized 187 computer devises used by the Democratic People’s Republic of North Korea (DPRK) to defraud U.S. based companies to
Student Data, Vendor Duties, and a Case That Moves Forward
On October 8, 2026, a federal judge in Pennsylvania allowed most claims in a student data-breach lawsuit against Fireworks Software, Inc. to proceed, while dismissing a New Jersey consumer-fraud claim. Adamek v. Fireworks Software, Inc., No. 2:24-cv-05185-NIQA, slip op. at
The AI Paper Trail: What Federal Contractors Can Challenge
Federal agencies’ growing use of artificial intelligence (AI) in procurement is opening a new front in bid protests. In Trax International Corp., No. 26-796 (Fed. Cl. Sept. 22, 2026), a federal appellate court rejected a challenge to a $449 million
AI and the Attorney-Client Relationship: Start the Conversation Early
Artificial intelligence (AI) is changing more than how legal work gets done; it is reshaping how in-house teams and outside counsel work together. As AI enters legal workflows, assumptions about who uses which tools, what information goes into them, and
Privacy Tip #512 – Coalition of 40 State AGs File Notice in Character.AI Bankruptcy Case
On October 14, 2026, a coalition of 40 state Attorneys General filed a Notice of Interest and Reservation of Rights in the bankruptcy proceeding involving debtor, Character Technologies, Inc. (Character) regarding its product Character.AI’s “outstanding regulatory, safety and privacy issues.”
Alleged ShinyHunters’ Leader Detained by Law Enforcement
Maybe attacking the FBI was not such a brilliant idea. Following the FBI attack, one of the suspected leaders of ShinyHunters has been detained and is in custody. Apparently, there is no honor among thieves, as he is reportedly assisting
Court Finds that MLB’s Arbitration Clause Doesn’t Cover the Bases
On September 30, 2026, a New York federal judge denied Major League Baseball’s digital-ticketing arm, MLB Advanced Media, L.P. (MLBAM), a chance to send to arbitration most claims over tickets that disappeared from the MLB Ballpark app after a cyberattack.
Personalized Pricing Puts Data Practices and Disclosures Under the Microscope
The Federal Trade Commission’s (FTC) proposed enforcement policy statement on personalized pricing signals that businesses may face scrutiny when they use consumer-specific data to set different prices for different customers without disclosing that practice. The statement is not binding law,