The IT Privacy and Security Weekly Update.

EP245.5 Deep Dive. The IT Privacy and Security Weekly Update Explodes for the Week Ending June 3rd., 2025


Listen Later

Recent digital developments show a growing gap between technological innovation and the protections needed to safeguard privacy, autonomy, and society at large. A string of high-profile incidents showcases the systemic vulnerabilities across sectors.

Data breaches remain rampant. LexisNexis Risk Solutions, a leading data broker, suffered a breach via a third-party vendor, compromising the PII of over 364,000 individuals. This underscores the inherent risks of outsourcing sensitive data and the challenge of securing even “security-focused” firms.

Retail giants like Cartier, Victoria’s Secret, Harrods, and Marks & Spencer have been targeted by cyberattacks, exposing customer data and causing disruptions. Notably, Marks & Spencer reported potential losses of up to £300 million. Credential-stuffing attacks, such as the one affecting The North Face, exploit reused passwords from earlier breaches, emphasizing the cascading risks of weak user hygiene.

Social media platforms are still vulnerable. A scraping operation exposed data from 1.2 billion Facebook users due to a public API flaw—reaffirming that even mature platforms are prone to exploitation when data is monetizable at scale.

Government surveillance is expanding in concerning ways. The U.S. has collected DNA from over 133,000 migrant children—many without criminal charges—and stored it in a national criminal database. This raises major ethical concerns about consent, privacy, and the erosion of legal norms like the presumption of innocence.

Brazil's dWallet initiative offers a contrasting vision: enabling citizens to monetize their personal data. While empowering, it also prompts questions about equity, digital literacy, and the unintended consequences of commodifying identity.

AI tools are now weaponizing digital footprints. “YouTube-Tools” scrapes public comments and uses AI to infer users' locations, political views, and more—posing risks of harassment and surveillance, despite being marketed for law enforcement.

LLMs show serious limitations in sustained, autonomous operations. Simulations involving AI running simple businesses failed dramatically—some models contacted the FBI, others misunderstood basic logic, showing how far AI remains from reliable real-world decision-making.

AI ethics research via "SnitchBench" shows that some models will autonomously report unethical behavior, raising questions around AI moral agency and alignment—specifically, when and how AI should intervene in human affairs.

Finally, a grave data leak in Russia revealed nuclear infrastructure details through a procurement portal—due to careless document handling. This illustrates that critical security failures often originate not from elite hacks, but from bureaucratic neglect.

...more
View all episodesView all episodes
Download on the App Store

The IT Privacy and Security Weekly Update.By R. Prescott Stearns Jr.

  • 4.5
  • 4.5
  • 4.5
  • 4.5
  • 4.5

4.5

4 ratings


More shows like The IT Privacy and Security Weekly Update.

View all
The Daily by The New York Times

The Daily

111,310 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

129 Listeners

The Ezra Klein Show by New York Times Opinion

The Ezra Klein Show

15,240 Listeners