tldrdailynews.com logo
Tag

Data Protection

All articles tagged with #data protection

Chrome Under Fire for Secret 4GB On-Device AI Install Without Consent
technology17 days ago

Chrome Under Fire for Secret 4GB On-Device AI Install Without Consent

Security researcher Alexander Hanff revealed that Chrome quietly installs a 4GB weights.bin file for Gemini Nano's on-device AI whenever default AI features are enabled, re-downloading it if the user tries to delete it and offering no consent or transparency. The move has sparked privacy and data-regulation concerns (GDPR), potential environmental impact from emissions tied to widespread device usage, and broad backlash, with Mozilla promising a kill switch and Vivaldi calling for user autonomy while Google remains silent.

via Futurism|
#ai-on-device#data-protection#environmental-impact
Microsoft rolls emergency patch to fix macOS/Linux ASP.NET Core privilege escalation
technology1 month ago

Microsoft rolls emergency patch to fix macOS/Linux ASP.NET Core privilege escalation

Microsoft issued an emergency update for ASP.NET Core's DataProtection package (versions 10.0.0–10.0.6) to fix a high-severity flaw (CVE-2026-40372) that allowed unauthenticated attackers on macOS and Linux to forge authentication tokens and gain SYSTEM privileges; upgrade to 10.0.7 immediately, and rotate the DataProtection key ring and audit long-lived artifacts since forged tokens could remain valid after patching.

via Ars Technica|
#aspnet-core#cve-2026-40372#data-protection
Microsoft patches critical ASP.NET Core data-protection flaw to curb cookie forgery
security1 month ago

Microsoft patches critical ASP.NET Core data-protection flaw to curb cookie forgery

Microsoft released out-of-band security updates for a critical ASP.NET Core Data Protection vulnerability (CVE-2026-40372) that could let unauthenticated attackers forge authentication cookies and gain SYSTEM privileges. The flaw comes from a regression in the 10.0.0–10.0.6 NuGet packages, which could cause forged payloads to bypass authenticity checks; upgrading to 10.0.7 and redeploying with a rotated DataProtection key ring fixes the issue. This follows April’s Patch Tuesday and includes additional out-of-band Windows Server fixes. No service disruption is reported, but applications using DataProtection should update promptly to prevent token forgery and data exposure.

via BleepingComputer|
#aspnet-core#cve-2026-40372#data-protection
Gaza aid groups push back on Israeli data demands, eyeing GDPR safeguards
world3 months ago

Gaza aid groups push back on Israeli data demands, eyeing GDPR safeguards

International aid groups operating in Gaza warn they face a choice between complying with Israel’s new data‑sharing rules or losing access to Gaza and the West Bank; the rules would force registration and broad disclosure of staff and donor information, potentially endangering personnel. NGOs argue the demands conflict with EU GDPR protections, prompting a High Court challenge and urgent EU engagement to suspend the measures. The EU Commission says it’s monitoring the situation and aims to facilitate privacy‑respecting solutions, warning that blocking aid could jeopardize life-saving relief.

via politico.eu|
#data-protection#eu-gdpr#gaza
Jersey warns of AI deepfake surge and calls for safeguards
technology3 months ago

Jersey warns of AI deepfake surge and calls for safeguards

Officials in Jersey (Information Commissioner Paul Vane) and Guernsey have joined a broad coalition of jurisdictions warning that AI-generated images and videos can harm real people, urging tighter oversight. They issued guidance on steps individuals can take to protect themselves, such as limiting what you share online, being cautious with AI platforms, and talking to children about AI use. The warning follows a recent incident where a deepfake targeting school staff prompted a police investigation.

via BBC|
#ai#data-protection#deepfake
Oxfam refuses to share Palestinian staff data with Israel amid Gaza aid crackdown
world3 months ago

Oxfam refuses to share Palestinian staff data with Israel amid Gaza aid crackdown

Oxfam refuses to disclose Palestinian staff details to Israel amid a Gaza aid crackdown, arguing that sharing sensitive data would threaten staff safety and breach humanitarian principles; Israel has deregistered dozens of NGOs and demanded extensive staff information, while MSF offered a limited, safeguarded list and PNGO warned the move jeopardizes aid work.

via Al Jazeera|
#data-protection#gaza#humanitarian-aid
MSF agrees to share staff data under Israeli security rules, drawing concern
world4 months ago

MSF agrees to share staff data under Israeli security rules, drawing concern

Doctors Without Borders (MSF) says it will provide a defined list of Palestinian and international staff to Israeli authorities under new security requirements, calling it an exceptional measure to safeguard operations. Critics warn the move could endanger aid workers in Gaza and the West Bank. Israel says dozens of NGOs have complied or are weighing the rules, and MSF notes that international staff arrivals into Gaza have been blocked since Jan 1, 2026, highlighting a deteriorating humanitarian situation.

via Al Jazeera|
#data-protection#gaza#israel
Disney to Pay $10 Million to Settle Children's Privacy Law Violations
business4 months ago

Disney to Pay $10 Million to Settle Children's Privacy Law Violations

Disney will pay $10 million to settle allegations of violating children's privacy laws by failing to properly label YouTube videos as made for children, leading to targeted advertising and data collection without parental consent. The settlement follows an FTC inquiry and requires Disney to improve compliance with children's data protection laws, specifically under COPPA.

via BBC|
#business#childrens-privacy#data-protection
business1 year ago

Career Missteps: Goldman VP's Holiday Blunder & Citi's Bold Promotions

eFinancialCareers has temporarily blocked access from mainland China to comply with the new Personal Information Protection Law (PIPL) that came into effect on November 1st. The company is assessing the law's implications on its business and is committed to adhering to privacy regulations in its operating regions. For inquiries, users are encouraged to contact eFinancialCareers support.

via eFinancialCareers|
#business#china#data-protection
technology1 year ago

NHS Limits Mounjaro Weight-Loss Jab to 220,000 Patients in Initial Rollout

Yahoo, as part of its family of brands, uses cookies to provide services, authenticate users, and measure site usage. By accepting cookies, users consent to Yahoo and its partners accessing device information and personal data for personalized advertising and content. Users can manage their privacy settings to control data usage and can change their preferences at any time through Yahoo's privacy settings.

via Yahoo Lifestyle UK|
#advertising#cookies#data-protection