IoT Security
LG Electronics USA Announces Ban on Residential Proxy Apps From Smart TV Store After Krebs Coverage
LG cleans up its smart-TV app store — a consumer-security move on the residential-proxy pattern this week.
Data Breaches
Estée Lauder Discloses Impact From Oracle E-Business Suite Zero-Day Breach
Another Oracle EBS customer disclosure lands: Estée Lauder confirms the theft of employees' personal, financial, and health data from its Oracle E-Business Suite HR system, closing one of the last gaps in the 2025 Oracle zero-day cycle.
Data Privacy
23andMe Reaches $18 Million Multi-State Settlement Across 42 State Attorneys General
A significant multi-state privacy settlement — regulatory-policy analysis coverage this week — as 23andMe agrees to pay $18 million to a coalition of 42 state attorneys general over the security failings behind its data breach.
Data Breaches
Qantas Discloses Data Breach Affecting 5.7 Million People Traced to Tech-Support Scam
A scale-significant airline-industry disclosure traced to a tech-support scam — sector-advisory coverage this week, based on early single-source reporting that Qantas has yet to fully detail.
Policy & Government
European Parliament Advances "Chat Control 2.0," Clearing Big Tech to Scan Messages for CSAM
A pointed EU privacy-and-messaging shift — compliance implications for Big Tech and civil-society groups this week.
Data Privacy
Pegasus Spyware Infected the Phone of an MEP Investigating Spyware, TechCrunch and WIRED Report
A pointed export-control-policy disclosure — the spyware-inquiry rapporteur becomes the target.
Artificial Intelligence (AI)
"BioShocking" Research Tricks AI Browsers Into Leaking User Credentials
A multi-vendor AI-browser research disclosure — defender posture-review work for organizations deploying agentic browsers this week.
Policy & Government
House Passes Kids Internet and Digital Safety (KIDS) Act 267-117; Senate Approval Unlikely
A bipartisan House vote on child-safety platform obligations — Senate outlook and industry response in focus this week.
Mobile Security
Researchers Disclose 282 iOS AI Apps Leaking API Keys in Network Traffic
A scale-significant AI-app privacy disclosure with developer accountability implications: Wake Forest researchers found 282 of 444 iOS AI apps exposing usable LLM credentials in their own network traffic, and most stayed open months after notification.
Data Breaches
Aflac Japan Discloses Data Breach Affecting 4.38 Million People
Another scale-significant Japanese-sector disclosure: Aflac Life Insurance Japan says intruders sat in its policyholder portal for ten days and exfiltrated the personal data of roughly 4.38 million customers and agents.
Threat Intelligence
Microsoft Removes 119 Edge Extensions That Hid Malicious Content in Images and Fonts
Browser-extension enforcement action at scale from Microsoft. The company pulled 119 Edge add-ons that concealed payloads inside image and font files, with a combined install base reported at up to 2.6 million, and suspended the developer accounts behind them.
Cybercrime
US Posts $10 Million Reward Over Russian-Intelligence Signal and WhatsApp Phishing
A coordinated US law-enforcement push against a Russian-intelligence messaging-app campaign pairs a Rewards for Justice bounty with an FBI advisory on Signal backup-recovery-key theft.