RESEARCH

Sourced Reporting on Digital Surveillance

Plain-language explainers on privacy, surveillance, AI ethics, digital rights, and data breaches. Sourced, dated, and updated when details change.

Latest Reports

2026-09-22Apple Watch Live Rewind Buffers 15 Seconds of Conversation — What Apple Says About Privacy

2026-09-22Korean Police Leaked Arrest Warrants and Interrogation Records to ChatGPT and Claude

2026-09-22Smart Glasses and AI Pins: The Privacy Backlash Tech Can't Ignore

2026-09-22Uber Fined €824.99 Million Over Automated Driver Deactivations

2026-09-21DHS Administrative Subpoenas: NY Senator Pushes Back on Warrantless Data Requests

2026-09-19One Stolen Flock Camera Exposed 50,200 Vehicles and 1.6 Million Images

2026-09-17Gyazo Breach Exposes 23.6 Million Accounts and 490 Million Image Records

2026-09-16CenterPoint Energy Breach: Hacker Claims 7.49 Million Customer Records

2026-09-13Revolut Breach: Fake Government Email Tricked an Employee Into Handing Over Customer Data

2026-09-08Chrome Deleted uBlock Origin From the Web Store

2026-09-08Public Housing Put Sensors in 300 Apartments. Tenants Sued.

2026-09-08Hasbro Told Massachusetts Workers Their IDs Were in the March Hack

2026-09-08153 Million License Scans Went Up for Sale. Then Vanished.

2026-09-08UK Airport Wi-Fi Signups Became an 8.7 Million Leak

2026-09-08Texas Frozen the Money. Florida Ordered the Poles Down.

2026-09-08Thomson Reuters Court Software Exposed Sealed Case Data

2026-09-06AI Agents Are Becoming a Security Problem: The 2026 Shift From Chatbots to Autonomous Systems

2026-09-06The EU AI Act's Transparency Rules Are Now Live: What Changed in August 2026

2026-09-06Prompt Injection Is a Web Security Problem Now: What AI Browsers Change

2026-09-06Synthetic Data Is Not Automatically Private

2026-09-05American Tower Breach Exposes 5.2 Million Records — And ShinyHunters Is Posting Samples

2026-09-05EU Advocate General Wants Belgium's Data Retention Law Struck Down — And the EU's Top Court Should Listen

2026-09-04Illinois Just Passed the Toughest US State AI Safety Law — And It Won't Bite Until 2028

2026-09-04Signal's Post-Quantum Triple Ratchet: What Changed and Why It Matters

2026-08-05CISA Flags an Actively Exploited TeamCity Vulnerability

2026-08-04CISA Added Three Actively Exploited Vulnerabilities to Its KEV List

2026-08-04Amazon's One Medical Breach Leaks Seniors' Medicare and Social Security Data

2026-08-04Smart Home Nightmares 2026: Your Devices Are Still Spying

2026-08-04The Supreme Court Just Made the FTC Fireable. Privacy Enforcement Will Never Be the Same.

2026-08-01California’s One-Request Data Broker Deletion System Is Now Live

2026-07-31Amgen Disclosed Cloud Data Exfiltration—Including Patient Health Information

2026-07-30CISA Warned That Internet-Exposed Water PLCs Are Being Taken Offline

2026-07-29Analog Devices Says Files Were Exfiltrated Without Interrupting Operations

2026-07-29The FTC Says Hims & Hers Sent Sensitive Health Data to Ad Platforms

2026-07-27The EU Cyber Resilience Act’s First Deadline Is About Vulnerability Reporting

2026-07-20Shark Robot Vacuum Flaw Could Let One Hack Reach 670,000 Homes

2026-07-16Hugging Face AI Agent Breach: The First Fully Autonomous Attack

2026-07-08The EDPB’s New Anonymisation Test Starts With What Someone Can Still Infer

2026-07-08The EDPB Says Scraping the Web for AI Still Counts as Data Processing

2026-07-02A Contractor Session Exposed Patient Data in AdaptHealth’s Cloud Systems

2026-06-25Google Gemini June 2026: Deep Integration, Deeper Privacy Questions

2026-06-23Frontend Framework Summer 2026: React 19.2, Vue 3.6, and Svelte 5

2026-06-16Microsoft Copilot's Expanding Reach: What It Means for Your Privacy

2026-06-15Chrome Privacy Sandbox June 2026: The State of Alternative Attribution

2026-06-15Klue Hack Shows How One Stolen Integration Key Exposes Everyone Downstream

2026-06-10Browser Fingerprinting: The Invisible Trail You Cannot Clear

2026-06-10Riseup Email: What a Nonprofit, Ad-Free Provider Actually Guarantees

2026-06-08The Password Manager Problem: Why Your Vault Might Not Be Secure

2026-06-05The API Security Crisis: How Attackers Exploit APIs at Scale

2026-06-05California Privacy Rights Act Amendments: What Changed in June 2026

2026-06-02Privacy-First Development: Building Apps That Do Not Spy on Users

2026-05-28The 2026 Biometric Privacy Landscape: Laws, Violations, and Your Rights

2026-05-27Connecticut’s New Privacy Law Targets Data Brokers and Surveillance Pricing

2026-05-23AI Mass Surveillance in 2026: What Is Legal and What Is Not

2026-05-23Browser Fingerprinting Defense: The Arms Race You Did Not Know You Were In

2026-05-23Data Broker Opt-Out 2026: Reclaiming Your Personal Data

2026-05-23Password Security in 2026: What Actually Works

2026-05-23Signal vs WhatsApp 2026: Why End-to-End Encryption Parity Matters

2026-05-22Firefox's Project Nova: A Design Refresh, Not an Engine Rewrite

2026-05-22The May 2026 Breach Wave: When the Supply Chain Snaps

2026-05-20DOGE Data Breach 2026: What Happened and What It Means

2026-05-19Ontario Police Are Hacking Phones With Spyware — And Dropping Cases to Hide It

2026-05-18Supreme Court Hears Chatrie v. United States: The Case That Could End Geofence Warrants

2026-05-17BIPA Voiceprint Lawsuits 2026: What the Cases Mean for AI Training

2026-05-17FTC Bans Kochava From Selling Location Data — What the 10-Year Order Means

2026-05-17GM's $12.75M CCPA Fine: Record Penalty for Selling Driver Data

2026-05-17The SECURE Data Act: What the Federal Privacy Bill Proposes and What It Misses

2026-05-17State Health Exchange Data Leaks: Tracker Data Sent to Meta and Other Platforms

2026-05-162FA Authenticator Apps in 2026: Which Ones Actually Protect You

2026-05-16Apple's AI Privacy: What Actually Goes to the Cloud

2026-05-16Browser Fingerprinting in 2026: Tracking Without Cookies

2026-05-16Canada Bill C-22: The Lawful Access Act Wants Your Encryption Keys

Older →