Jari Pirhonen

EU Commission about to wreck core principles of the GDPR The EU Commission has secretly set in motion a potentially massive reform of the GDPR. noybs first overview of the proposed changes.

"As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the #GDPR"

noyb.eu/en/eu-commis... @noyb.eu #privacy

Bank of England says JLR's cyberattack damaged UK GDP growth : This kind of material economic impact from online crooks thought to be a UK-first

"The Bank of England (BoE) has cited the cyberattack on Jaguar Land Rover (JLR) as one of the reasons for the country's slower-than-expected GDP growth in its latest rates decision."

www.theregister.com/2025/11/07/b...

High Conflict (Amanda Ripley): "The biggest problem in communication is the illusion that it has taken place. First, we think we have conveyed our intentions and desires clearly when we haven’t. And second, we don’t really know what our intentions and desires are." #book #quote

"Meta internally projected late last year that it would earn about 10% of its overall annual revenue – or $16 billion – from running advertising for scams and banned goods, internal company documents show."

www.reuters.com/investigatio...

Orwell’s Writing Rules: How to Write With Clarity A reflection on George Orwell's writing rules; six informal guidelines to think clearly and avoid producing meaningless drivel.

"If people couldn’t write well, George Orwell famously said, they couldn’t think well. And if they couldn’t think well, others would do the thinking for them."

themindcollection.com/orwells-writ...

"The after action report from Nevada's technology office about what happened during and after a ransomware attack detected Aug. 24 that disrupted 60 state agencies, some for 28 days"

gov.nv.gov/uploadedFile... (pdf) #cybersecurity #breach

State of the #AI 2025 report

www.stateof.ai/2025-report-...

Welcome to the Artificial Intelligence Incident Database The starting point for information about the AI Incident Database

#AI Incident Database

incidentdatabase.ai

M&S pegs cyber cleanup costs at £136M, profits tumble : Retailer's tech systems aren’t down anymore, but the same can’t be said for its rocky financials

"Marks & Spencer says its April cyberattack will cost around £136 million ($177.2 million) in total."

www.theregister.com/2025/11/05/m... #cybersecurity #crime #ransomware

2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned I hate hyperbolic news headlines about data breaches, but for the "2 Billion Email Addresses" headline to be hyperbolic, it'd need to be exaggerated or overstated - and it isn't. It's rounded up from…

"1,957,476,021 unique email addresses. Oh - and 1.3 billion unique passwords, 625 million of which we'd never seen before either. It's the most extensive corpus of data we've ever processed, by a significant margin."

www.troyhunt.com/2-billion-em...

Agentic AI Threat Modeling Framework: MAESTRO | CSA MAESTRO (Multi-Agent Environment, Security, Threat, Risk, & Outcome) is a novel threat modeling framework for Agentic AI. Assess risks across the AI lifecycle.

"MAESTRO (Multi-Agent Environment, Security, Threat, Risk, and Outcome), a novel threat modeling framework designed specifically for the unique challenges of Agentic #AI."

cloudsecurityalliance.org/blog/2025/02... #cybersecurity

"The seven EU countries closest to Russia"? Finland is pretty close as well 🤔

Inside Ukraine's drone campaign to blitz Russia’s energy industry Ukraine has used long-range drone strikes against Russian energy infrastructure to undercut Russia’s economy and try to bring Moscow to the negotiating table.

"Ukraine has launched at least 58 attacks on key Russian energy sites since the start of August, sending drones as far as about 2,000 km into Russian territory"

www.reuters.com/graphics/UKR...

"Russia’s kinetic campaign—bombings, arson, assassination plots—should be seen as both punishment for Europe’s support to Ukraine and preparation for potential wider conflict."

www.globsec.org/what-we-do/p... #security #safety

Rogue ransomware negotiators accused of extortion attacks : Rogues committed extortion while working for infosec firms

"A #ransomware negotiator and an incident response manager at two separate cybersecurity firms have been indicted for allegedly carrying out ransomware attacks of their own."

www.theregister.com/2025/11/03/r...

DHS expands biometric entry-exit, CBP to photograph all noncitizens at US borders | Biometric Update The measure takes effect December 26 and authorizes CBP to photograph “all aliens” at all ports of entry and departure, and “any other point of departure.”

"US Department of Homeland Security formalized what had been years in the making: a full-scale system to photograph and track every non-citizen who enters or leaves the U.S. For non-citizens, those images can be retained for up to 75 years"

www.biometricupdate.com/202510/dhs-e... #privacy

2025 AI Adoption Report: Gen AI Fast-Tracks Into the Enterprise Now in its third year, this unique, year-over-year, cross-sectional study shows where the common use cases are, where returns are emerging, and which people- and process-levers could convert…

#Security risk, operational complexity, and data inaccuracy are top barriers to using #GenAI

knowledge.wharton.upenn.edu/special-repo... #AI #cybersecurity

The Finnish lifestyle philosophy that could save Europe Sisu, or grit in the face of adversity, is just what the continent needs

"It is time for a new Nordic trend. Luckily, Finland has just the thing: #sisu—a personality trait or philosophy combining inner strength, perseverance and a can-do attitude towards adversity" #grit

www.economist.com/europe/2025/...

Jaguar Land Rover’s cyberattack holds an ominous lesson for British businesses The attack on Jaguar Land Rover could be the most economically damaging in UK history. Now, attention turns to what happens next.

"Jaguar Land Rover is thought to have been victim to the most economically damaging cyberattack in British history. It marks the third such high-profile case in the U.K. this year, raising concerns over the country’s cyber reslience."

www.cnbc.com/2025/10/29/j... #cybersecurity

Understanding LLMs from Scratch Using Middle School Math In this article, we talk about how LLMs work, from scratch — assuming only that you know how to add and multiply two numbers. The article…

"how Large Language Models work, from scratch — assuming only that you know how to add and multiply two numbers"

medium.com/data-science... #AI #LLM #GenAI

Press Releases 2025 New ISACA Research Identifies What Will Keep Tech Pros Up at Night in 2026 The 2026 Tech Trends & Priorities Pulse Poll finds regulatory compliance, business continuity and resilience, and managing AI-related risk are top focus areas for the coming year.

"The 2026 Tech Trends & Priorities Pulse Poll by ISACA finds regulatory compliance, business continuity and resilience, and managing AI-related risk are top focus areas for the coming year"

www.isaca.org/about-us/new... #infosec #cybersecuriy #AI

Microsoft: DNS outage impacts Azure and Microsoft 365 services Microsoft is suffering an ongoing DNS outage affecting customers worldwide, preventing them from logging into company networks and accessing Microsoft Azure and Microsoft 365 services.

Never attribute to malice that which is adequately explained by #DNS.

www.bleepingcomputer.com/news/microso...

Microsoft Exchange Server security best practices

www.cisa.gov/resources-to... #cybersecurity

Sixty-five nations sign first UN treaty to fight cybercrime, in milestone for digital cooperation Sixty-five nations have signed a landmark United Nations treaty in Hanoi aimed at tackling cybercrime – a move Secretary-General António Guterres hailed as a historic step toward a safer digital…

"The new United Nations treaty criminalises a range of cyber-dependent and cyber-enabled offences, facilitates the sharing of electronic evidence across borders and establishes a 24/7 cooperation network among States."

news.un.org/en/story/202... #cybercrime

AWS outage exposes Achilles heel: central control plane Analysis: Too many services depend not just on one cloud provider, but on one location

"The AWS outage is yet another reminder of the weakness of centralised systems. When a key component of internet infrastructure depends on a single US #cloud provider, a single fault can bring global services to their knees"

www.theregister.com/2025/10/20/a...

Finland has a message for Vladimir Putin: We're ready Blasted into the bedrock, deep below the streets of Helsinki, these massive bunkers are currently used for recreation. Their primary function, however, is much more sinister: preparing for a Russian…

“For a small nation, preparedness is a matter of existence. Finland has learned it the hard way.”

www.abc.net.au/news/2025-10... #safety #security #defence

Extortion and ransomware drive over half of cyberattacks Microsoft launches its sixth annual Digital Defense Report, highlighting trends from July 2024 to June 2025, including that over half of cyberattacks with known motives were driven by extortion or…

"Malicious actors remain focused on attacking critical public services—targets that, when compromised, can have a direct and immediate impact on people’s lives."

blogs.microsoft.com/on-the-issue... #cybersecurity #infosec #crime

Microsoft Digital Defense Report 2025 | Microsoft Explore the scale and sophistication of today’s cyber threats, the impact of emerging technologies, and the strategies that leaders, governments, and defenders can use to defend against them in our…

Microsoft Digital Defense Report 2025

www.microsoft.com/en-us/corpor... #infosec #cybersecurity #security

"Representatives for F5 told customers the hackers were in its network for at least 12 months"

www.reuters.com/technology/b... #cybersecurity #breach

Autonomous AI Hacking and the Future of Cybersecurity - Schneier on Security AI agents are now hacking computers. They’re getting better at all phases of cyberattacks, faster than most of us expected. They can chain together different aspects of a cyber operation, and hack…

"What will surprise us most might not be the paths we can see, but the ones we can’t imagine yet." #AI #cybersecurity

www.schneier.com/blog/archive...