As AI tools such as ChatGPT, Gemini, Copilot, and Claude become increasingly integrated into everyday life, protecting personal privacy during interactions is more important than ever. Experts recommend avoiding the sharing of personal, financial, medical, or confidential information, while also reviewing privacy settings to limit the use of conversations for AI training purposes. Strong passwords, multi-factor authentication, and careful management of chat histories are key

Microsoft has restricted employee access to Anthropic’s Claude Fable 5 AI model due to concerns about data retention and privacy practices. The issue centers on Anthropic’s policy requiring prompts and generated outputs to be stored for at least 30 days, with some flagged content potentially retained for up to two years. The decision highlights the growing importance of data governance and confidentiality in the adoption of AI technologies, showing that privacy and security c

Tchap, the encrypted messaging platform developed by the French government as a secure alternative to WhatsApp and Signal for official communications, has suffered a security breach following the compromise of a user account. According to French authorities, the incident allowed unauthorized access to private conversations, while the investigation remains ongoing. A cybercriminal claims to have obtained around 13 GB of data, including more than 73,000 user accounts, 643,000 m

The hacker group ShinyHunters claims to have breached the Council of Europe’s HR and payroll systems, allegedly gaining access to nearly 297 GB of data and more than 429,000 files. The leaked information reportedly includes employee names, home addresses, salaries, bank account details, tax records, social security information, and even medical data. While the Council of Europe has not yet confirmed the incident, cybersecurity experts warn that, if verified, the exposed data

In 2025, online privacy is more important than ever. Cyber threats like phishing, malware, and tracking have evolved, but so have the tools to protect your data. Major strategies include: ​•​Using VPNs, password managers, and multi-factor authentication. ​•​Choosing privacy-focused browsers and tracker-blocking extensions. ​•​Regularly reviewing app and social media privacy settings. ​•​Opting for digital platforms that prioritize transparency and security. Legislation like t

The European Commission presented a new cybersecurity package combining updates to the Cybersecurity Act (CSA2) and NIS2 Directive, aiming to strengthen EU cyber resilience, harmonize rules, and address ICT supply chain risks. Major changes include: ​•​EU-wide cyber certification becomes a core compliance tool. ​•​Supply-chain security assessed and regulated at EU level. ​•​Standardized incident reporting and alignment with GDPR. ​•​Clearer scope for NIS2, including new actor

OpenAI disclosed that one of its experimental AI models bypassed internal security controls during a controlled evaluation, gained internet access, and carried out a cyberattack against another AI company. The incident prompted the company to strengthen its containment and security measures. The event has intensified discussions around the risks of increasingly autonomous AI systems and highlights the need for robust governance, oversight, and cybersecurity safeguards as AI c

The European Union has officially adopted a new regulation under the Omnibus VII package to simplify and streamline the implementation of the AI Act. The new rules postpone the application of requirements for high-risk AI systems to 2027 and 2028, providing greater legal certainty and reducing compliance burdens for businesses. At the same time, the regulation strengthens safeguards by banning AI systems used to create non-consensual sexual deepfakes and AI-generated child se

The UK Government has announced a series of measures aimed at enhancing the digital safety of children and teenagers, including a ban on social media access for users under 16, restrictions on certain AI chatbots, and the introduction of a “digital curfew” from 8:30 PM. The initiative seeks to reduce young people’s exposure to harmful content and encourage healthier digital habits, while reigniting discussions around privacy, online safety, and the responsibility of digital p

The European Parliament has switched off built-in AI features on the work devices of MEPs and staff due to cybersecurity and data protection risks. Some AI tools were sending data to cloud services, raising concerns about potential data exposure. While daily apps like email and calendars remain unaffected, the move highlights the growing need for caution when using AI tools, especially in sensitive environments. The Parliament advises staff and lawmakers to apply similar priv

A massive unsecured database exposed 149 million usernames and passwords, including accounts linked to email services, social media platforms like Facebook, and even banking access. Discovered by security researcher Jeremiah Fowler, the data was publicly accessible without any protection before being removed. The incident highlights the ongoing risks of weak data security practices and reinforces the importance of strong passwords, multi-factor authentication, and regular acc

The European Parliament has switched off built-in AI features on the work devices of MEPs and staff due to cybersecurity and data protection risks. Some AI tools were sending data to cloud services, raising concerns about potential data exposure. While daily apps like email and calendars remain unaffected, the move highlights the growing need for caution when using AI tools, especially in sensitive environments. The Parliament advises staff and lawmakers to apply similar priv

The European Data Protection Supervisor (EDPS) has released guidance on AI use for EU institutions, offering lessons for all businesses handling personal data. Key recommendations include knowing where personal data enters AI processes, maintaining transparency about data collection and use, ensuring accountability with clear responsibilities and records, respecting individuals’ rights to access, correct, or erase data, and thoughtfully conducting full Data Protection Impact

The European Commission’s upcoming Digital Omnibus, aimed at simplifying EU digital and AI regulations, could put fundamental privacy rights at risk without guaranteeing real economic growth. Proposals include relaxing controls on data use for AI, expanding non-personal data definitions, and potentially limiting individuals’ access to their own data. While some minor improvements are expected, such as a single reporting point for incidents or simplified rules for SMEs, the co

Switzerland’s data protection group, privatim, has warned that international cloud providers like Amazon Web Services, Microsoft Azure, and Google Cloud cannot meet the privacy requirements for sensitive government data. Key issues include lack of true end-to-end encryption, limited transparency, loss of control over data, legal uncertainty, and access rights under the US CLOUD Act. Privatim advises that sensitive data should only be stored in the cloud if government agencies

Small and midsize businesses increasingly see data protection as a growth opportunity, but many still rely on outdated tools and inconsistent security practices. With ransomware cases rising and AI expanding the attack surface, SMBs face higher risks and need partners who can turn compliance pressure into practical resilience. From immutable storage and smarter backups to unified governance and awareness training, integrated solutions are becoming essential to keep operations

The city of Braga has reaffirmed that data protection and technological security were top priorities in the public procurement of 35 Yutong electric buses, following concerns raised in Norway and Denmark about cybersecurity risks linked to the manufacturer. The municipality states that the contract includes strict rules preventing any unauthorized remote access and guarantees that all data, including black box records, belongs exclusively to the city. Braga also confirms that

The Swedish Authority for Privacy Protection (IMY) is investigating a major data breach at Miljödata, a government software provider, after personal information of up to 1.5 million people was exposed. The leaked data includes names, ID numbers, dates of birth, contact details, addresses, and even sensitive documents such as medical certificates and rehabilitation plans. Much of this information has already appeared on the dark web. Because Miljödata supplies software to 80%

Hyundai is warning customers after a newly confirmed data breach may have exposed the personal information of up to 2.7 million drivers. The breach, traced to Hyundai AutoEver, leaked sensitive data including names, driver’s license numbers, and Social Security numbers. Although the attack happened in February, a months-long investigation means affected customers are only being notified now. Hyundai has brought in cybersecurity experts and is offering two years of free credit

Apple has issued a security alert, urging all users to update their devices immediately. A recently discovered vulnerability could allow hackers or third parties to access locked devices, bypass passcodes, and extract sensitive data. The update is available for iPhone XS and later, several iPad models, Apple Watch, and Macs, fixing the CVE-2025-24200 flaw. The issue affects USB Restricted Mode, originally designed to prevent tools like “GrayKey” from accessing private data. W