Google is discontinuing its dark web report feature in early 2026. The company says user feedback indicated the tool, which scanned for personal info in data breaches, wasn’t providing helpful next steps. Users will need to delete their monitoring profiles before the February 16 shutdown.
Repsense, a data analytics startup whose Havel platform is used by NATO, has closed a €2 million Seed round. The funding will boost its capabilities in detecting and predicting information threats across social and traditional media.
A critical React server-side flaw is being exploited at scale by over a dozen distinct attack groups. Wiz reports half of all vulnerable, internet-facing systems remain unpatched, creating a massive attack surface for everything from cryptojacking to sophisticated espionage.
The 2026 National Defense Authorization Act includes new security rules for research with “countries of concern” like China. However, it removed a controversial proposal that would have blocked funding for U.S. scientists collaborating with researchers from hostile nations.
The Swiss government has scrapped a controversial surveillance proposal following fierce opposition from the country’s privacy tech sector. The reversal, formalized on December 10, forces officials back to the drawing board and delays any new law by at least two years.
Apple is doubling down on its unique approach to enterprise security, prioritizing its own ecosystem’s integrity. This strategy of “identity resilience” comes with clear trade-offs for business IT.
Tourists from dozens of allied countries could be forced to provide a five-year social media history to enter the US. The proposal, citing a Trump executive order, would also demand email and phone records, potentially adding millions of man-hours to processing.
Security researchers uncovered GeminiJack, a zero-click vulnerability in Google’s Gemini Enterprise AI. The flaw allowed hidden instructions in shared Docs or Calendar invites to manipulate the AI and exfiltrate sensitive corporate data during normal searches, bypassing all traditional security tool
The UK’s media regulator, Ofcom, has fined AVS Group Ltd £1 million for not having robust age verification on its adult websites. The company, registered in Belize, now faces daily fines until it implements checks across all its platforms.
Microsoft’s December 2025 Patch Tuesday addressed 66 vulnerabilities, including three zero-days. One, CVE-2025-62221, is an actively exploited Windows kernel flaw that allows full system takeover. The update comes as admins also scramble to patch the widespread React2Shell flaw.
