regulation
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
TikTok has agreed to a $400 million settlement with the U.S. Department of Justice to resolve a lawsuit alleging violations of child privacy laws. The lawsuit, filed in 2024, accused the company of improperly collecting data from users under 13 and failing to comply with parental requests to delete accounts. The settlement includes an immediate payment of $300 million and an additional $100 million contingent on the dissolution of a prior consent decree related to Musical.ly.
Black Hat USA 2026: AI is racing ahead of cybersecurity controls
Black Hat USA 2026 highlighted the rapid advancement of AI and its increasing role in cybersecurity, while also raising critical questions about accountability. Discussions focused on the challenges of regulating AI due to its swift evolution and the difficulty in assigning responsibility when AI-driven incidents occur. Experts emphasized the need for human oversight, robust governance, and a collaborative approach to ensure AI is developed and deployed safely and responsibly.
China Launches Cybersecurity Review of Palo Alto Networks Products
China's Cyberspace Administration has initiated a cybersecurity review of Palo Alto Networks' products sold within the country, citing national security concerns. The review, based on national security and cybersecurity laws, lacks specific details regarding the reasons or potential impact. Palo Alto Networks has stated that its operations and product delivery in the region remain unaffected for now.
Growing Up The Hard Way
The open-source software ecosystem, once a free-wheeling environment, is facing a significant shift due to increasing security threats and regulatory pressures. Projects will need to demonstrate ongoing maintenance, accountability, and a clear path for security updates to be considered viable for enterprise use. This evolution will likely split the open-source landscape into a subset of
Your next car could be watching your face
New regulations in the EU and upcoming US mandates require driver-monitoring technology in all new cars to enhance safety by detecting drowsiness and distraction. However, these systems raise significant privacy concerns, including constant biometric surveillance, potential data sharing with insurers, increased vehicle costs, and the risk of false positives or expanded monitoring through software updates. Consumers are advised to research privacy policies and disable non-essential data-sharing features when purchasing new vehicles.
Supreme Court allows Texas app law requiring age verification to take effect
The Supreme Court has permitted a Texas law requiring app age verification to take effect. Advocacy and technology trade groups had sought an emergency stay of the Texas App Store Accountability Act.
CERT-In’s AI Vulnerability Blueprint: Why Indian CISOs Need Machine-Speed Risk Operations in the Post-Mythos Era
India's CERT-In has issued a blueprint for cybersecurity operations, emphasizing machine-speed risk management to address the evolving threat landscape driven by AI. The directive mandates a 12-hour containment for known exploited vulnerabilities, a significant acceleration from the current average breach lifecycle. This necessitates a shift towards continuous, automated risk operations centers that can detect, prioritize, validate, and remediate threats rapidly to meet new compliance and security standards.