Apple accused of letting fake crypto app steal $1.8 million
The case raises fresh questions about how effectively Apple polices apps that impersonate legitimate developers.
Search Intelligence
OpenAI’s rogue AI agent shows why we need federal rules for autonomous systems
The Hugging Face breach shows there is a gap in federal policy. The frameworks to govern autonomous AI already exist—there just needs to be the desire to apply them. The post OpenAI’s rogue AI a
July Apple updates are especially important if you receive images
Apple issued a large July security update with several image processing related vulnerabilities that could compromise your device.
What’s your data worth on the dark web? (Lock and Code S07E15)
This week on the Lock and Code podcast, we discuss just exactly why it is that hackers and scammers want your data—and how you're at risk.
A week in security (July 20 – July 26
A list of topics we covered in the week of July 20 to July 26 of 2026
OpenAI’s agent escaped its sandbox during a security test
An OpenAI agent escaped its sandbox, stole credentials, and broke into Hugging Face. Here's what that actually means.
Google wants to store a selfie video of your face
A new selfie video verification feature could make recovering your Google Account easier. But it also creates new security and privacy concerns.
Millions of cars could be tracked and unlocked by a hidden security flaw
A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don't know they have one.
Chick-fil-A loyalty accounts hijacked using stolen passwords
If you have a Chick-fil-A One account, now is a good time to change your password—and make sure it's one you don't use anywhere else.
Paidwork breach exposes data of 23 million users: Check if you’re affected
A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected.
Healthcare giant Abbott probes two cyber incidents amid extortion claims
Extortion groups ShinyHunters and ShadowByt3$ claim they stole vast amounts of patient data. Those allegations have not been verified.
A week in security (July 13 – July 19)
A list of topics we covered in the week of July 13 to July 19 of 2026
The backlash against Flock cameras is spreading
Privacy concerns have dogged Flock's automated license plate recognition system for years. Now accuracy and reliability are coming under scrutiny too.
Security updates available for Adobe, Chrome, Firefox, VMWare, and Zoom
Several updates have been made available including those for Adobe, Chrome, Firefox, VMWare, and Zoom.
This fake Apple app can unlock your Mac’s password vault
Disguised as Apple's CrashReporter, CrashStealer steals passwords, browser data, crypto wallets, and other sensitive information.
Security Hub adds AI workload protection and multicloud support for Microsoft Azure
Security Hub is our foundation for full-stack enterprise security across clouds. It centralizes your security operations and turns raw signals into prioritized insights, so your team spends its time m
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking (virtually) at the Policy-Relevant Privacy Research Workshop in Calgary, Canada, on Monday, July 20, 2026. I’m speaking a
Warning: Scammers are using FaceTime to empty bank accounts
Cybercriminals are combining social engineering through apps like FaceTime with unpatched devices to steal credentials and drain bank accounts.
Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys --
A week in security (July 6 – July 12)
A list of topics we covered in the week of July 6 to July 12 of 2026