Know what changed. Know what matters.

A newly uncovered Elasticsearch database contains more than 24 billion stolen username/password combinations, exposing a massive trove of compromised credentials that could be leveraged by attackers worldwide.

Sony announced new parental‑control tools aimed at giving parents visibility over their children’s PlayStation activity.

Sony stored user passwords without proper encryption, exposing them on December 9, 2018.

An unauthenticated attacker can run arbitrary code on any vulnerable WordPress core installation via crafted HTTP requests.

The U.S. National Telecommunications and Information Administration issued a July 22 report outlining measures to shield kids from digital harm, including stricter age verification and anti‑dark‑pattern design rules.

The European Commission ordered Google to give rival AI assistants access to Android’s mic, camera, screen, wake‑word detection while the display is off, and background app control by August 1 2027.

Attackers now conduct about 36 000 malicious scans per second—a 16.7 % increase from last year—raising concerns about rapid vulnerability discovery.

Researchers uncovered an IoT botnet framework that used a large language model to generate code, highlighting how AI lowers barriers to creating sophisticated malware.

In April 2026 France’s ANTS database was breached, exposing between 11‑18 million credential records.

The FTC keeps the COPPA rule unchanged while boosting parent‑education initiatives.

The Consumer Financial Protection Bureau announced a rule on December 3, 2024 that would prohibit data brokers such as Acxiom, Experian, and TransUnion from selling sensitive personal details without consumer knowledge or consent.

A threat actor used an AI-generated PowerShell script to map a corporate Active Directory environment.