HeadFlash Privacy

Citizen Lab says an Israeli ad agency's platform served millions of ads that covertly installed spyware, including on dozens of Al Jazeera devices.

Sources:

• Online ads weaponised to deliver ‘zero-click’ spyware, researchers say | Hacking | The Guardian
• UK data watchdog warns Met Police over shadow IT data breach | Computer Weekly
• EU Requires Smart Glasses LED to Shut Camera Off When Covered: GDPR Now Falls on Makers
• Some Meta Smart Glasses Secretly Recorded Conversations: Owner...
• MyChart and a major hospital said I could opt out of sharing my health data. But they didn’t make it easy

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Doctoralia removed web trackers that leaked patient searches and appointment details to Google, LinkedIn and TikTok, while Washington immigration arrests tied to driver data jump fivefold.

Sources:

• World’s largest health appointment platform dumps its web trackers after Markup investigation
• Signal: We won’t comply with Canadian surveillance bill
• Other courts should heed a federal judge’s warning about Flock-enabled mass surveillance
• Korea Privacy Regulator Admits Security Failures as Banking Breach Tests PIPA Fine Ceiling
• Immigration arrests linked to Washington driver data ‘off the charts’

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

South Korea's record data-breach penalty, Pegasus data reaching NSO, and a college that had to trash-bag its own cameras.

Sources:

• Coupang Data Breach Fine Reaches Record $466M: National Assembly Summons Executive Over Stolen Key
• EU watchdog urges smart glasses to clearly signal when recording
• Israeli producer had access to data harvested by Poland using Pegasus spyware, say prosecutors | Notes From Poland
• A college in Illinois tried to cancel its Flock contract and it refused | The Verge
• India’s GDPR-Inspired Privacy Law Leaves State Power Unchecked

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Norway's largest-ever privacy fine hits Microsoft's Xandr for exposing Grindr users' sensitive data in ad auctions.

Sources:

• Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
• Police are using AI to locate homes from a single interior photo, and even a picture of a washing machine can be enough
• Some Shoppers Paid 23% More for the Same Groceries. Here’s Why.
• Is Someone Reading Your WhatsApp Messages? Here’s How to Check and Protect Your Account
• Worse than Flock

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Plus: Dutch push for a kill switch on EU police data deals, and the ICO probes a 169% surge in WhatsApp scam calls.

Sources:

• 100M Emails, 500M Chats: Google's Bid for Bankrupt Spirit Airlines' Data to Train AI Raises Privacy Alarm | IBTimes UK
• The Hague wants a kill switch for EU police data-sharing with third countries
• Data watchdog investigating huge surge in ‘add me on WhatsApp’ scam calls
• `123456’ password used in massive Danish CPR data breach - The Copenhagen Post
• Chat Control 1.0 passed the European Parliament — through the back door | Euronews
• Duck.ai share links expire after 48 hours by default
• 9 in 10 US adults report scam attempts as confidence in data privacy plunges
• Saxony-Anhalt regulator says recycle bin does not count as GDPR deletion
• Slammed on the brakes to save a life? Your insurance app just penalized you
• YouTuber Says Cops Paid Him a Visit After He Built Flock-Style Camera to Track Cops
• Your legal rights if neighbour has a video doorbell — privacy laws explained
• 10TB of mystery data and access to your calls and contacts: 'smart' coffee makers are the perfect example why there's a privacy revolt happening
• Walmart’s Patents Reveal the Technology That Could Let Algorithms Raise Your Prices
• One of America’s Last Remaining Chestnut Groves Could Soon Be Wiped Out to Make Room for an AI Data Center
• Flock Is Catching Flak. Experts Say Other Police Surveillance Tools Are More Worrisome

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Lawmakers question data retention, oversight of a 200-camera license plate reader network, while the ICO secures privacy changes from 10 AI developers.

Sources:

• Long Island lawmakers question Flock Safety over privacy, oversight of license plate readers
• Remote Employee Fired After Refusing To Be Photographed by an AI Tool Every Three Minutes, Lawsuit Claims
• ICO secures data protection changes from 10 AI developers, turns to agents
• Is Your Phone Secretly Tracking You? The Free Open Source App That Reveals Hidden Android Trackers

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Meta's AI assistant drafts hourly dossiers on people who never signed up, while a South Korean megachurch breach may have hit 850,000 members.

Sources:

• Meta's Muse Is Building Dossiers on Your Friends and Family, Even If They Never Signed Up, Internal Files Reveal | IBTimes UK
• Massive church cyberattack may have exposed data for 850,000 members
• New AI Can Figure Out What You’re Thinking About From a Brain Scan
• Surfshark claims a major first by bringing full post-quantum security to WireGuard
• Man discovers his parents’ coffee machine used 1TB of data in 10 days - Dexerto

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Denmark's national register exposed 8.8 million records, the FBI removed an Accenture contractor over an unpatched system, and Indonesia passed a sweeping data law.

Sources:

• 8.8 Million Impacted by Data Breach at Denmark’s Central Person Register - SecurityWeek
• Accenture contractor removed from FBI after unpatched system led to breach
• Rand Paul Blocks Kids Online Safety Act: Senate Has Weeks to Pass Duty-of-Care Bill
• Indonesia’s House passes data law covering AI, blockchain
• Messaging service Signal says minister’s changes to lawful access bill will not persuade it to stay in Canada

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Denmark calls the population register breach extremely serious, Seattle bans data-driven grocery pricing, and Raleigh weighs driverless patrol cars.

Sources:

• Data breach hits Denmark's population register, affecting 8.8 million
• Seattle mayor signs grocery law banning pricing differences based on personal data
• Raleigh police consider driverless patrol cars that can stream live video, raising privacy concerns
• Texas city wants $2.3M for public records on police Flock use
• Why I Don't Use AI to Remove PII Before Sending Data to AI | HackerNoon

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Germany's customs agency has turned messenger device-linking into a permanent surveillance tactic, plus Italy's €7M IQVIA fine and more.

Sources:

• German Police Are Using Linked Devices to Read Messages from Messaging Apps Without Cracking the Encryption
• Flock Cameras Are Coming Down Around The Country Only To Be Replaced By The Same Technology With A Different Name
• Report claims cops have breached one of iOS’s most secure features — and it could put your private data at risk
• AI agents can now erase the evidence of what they’ve done
• Italy fines IQVIA €7M over health data of 1M patients it called anonymous
• Your Mac May Already Be Giving AI Apps Far More Access Than You Realize, and Apple Is Warning the Privacy Risk Is About to Get Worse
• ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say
• Flock drones with cameras deployed as first responders in some US cities amid privacy concerns — UAVs connect to wider emergency services system and streams video to dispatchers, officers | Tom's Hardware
• Your Personal Data Is Safest Right After You Restart Your Phone - Here's Why
• Sen. Chuck Schumer sounds alarm on Flock cameras, demands greater transparency on use of data
• Georgia holds emergency meeting on AI exposing voters’ secret ballots | US midterm elections 2026 | The Guardian
• Florida TikTok creator lands in jail after allegedly turning women’s private data into posts
• Toronto-based VPN provider plans to quit Canada over lawful-access bill
• Why you shouldn't sync your phone to a rental car

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.