US Bank says it has “no indication” its internal systems are impacted after LockBit claimed a breach and set a September 3 pay-or-leak deadline.
Aug 20, 2026 ·
The Register
Apple’s 32-page reply to OpenAI’s counterclaims says OpenAI’s defenses—such as challenging what counts as “protectable” trade secrets and blaming Apple for making access too easy—are disputes to be resolved after discovery rather than reasons to dismiss the case.
Aug 20, 2026 ·
Computerworld
eSafety found Roblox still fails to stop adults from creeping on kids, including allowing adult strangers to send connection requests to children and letting adults search and comment on kids’ posts in forums outside game environments without parental consent.
Aug 20, 2026 ·Ars Technica
Two U.S. senators gave TikTok until September 1 to answer 13 questions about an experiment that disabled a safety feature for 15 million U.S. users, including a 16-year-old who later died by suicide.
Aug 20, 2026 ·
TechCrunch
The FTC proposed a policy on “personalized pricing,” defined as using personal data to set prices based on what a company believes you’re willing to spend, and said businesses that don’t disclose how personal data is used could violate the FTC Act.
Aug 20, 2026 ·
CNET
A security researcher enrolled a Linux machine into Apple’s Find My network and then retrieved live “people-location” data that Apple normally shares only with Apple devices for a specific Apple account that had location sharing enabled.
Aug 20, 2026 ·The Register
Scammers are using AI to impersonate high-profile targets, including celebrities and politicians, to carry out audio deepfake impersonation scams.
Aug 20, 2026 ·CNET
Australia’s parliament passed a law requiring Meta, Google, TikTok, LinkedIn and other covered tech firms to pay a 2.75% levy on local revenues if they don’t strike deals with at least eight local news outlets within their annual reporting periods.
Aug 20, 2026 ·
Engadget
GuidePoint Security says an outfit called “Ransom Busters” (likely a ransomware affiliate) contacts ransomware victims before attacks become public and offers file recovery and data deletion for $20,000–$60,000, using the same tooling and fingerprints as prior ransomware incidents tied to DragonForce, Settra, and Anubis.
Aug 20, 2026 ·The Register
Comcast says its WiFi Motion feature can store motion event information in the Xfinity app for up to 7 days when a customer enables it, but it does not capture images, video, audio, or identifying information about people or pets.
Aug 20, 2026 ·
The Verge
Decommissioning about 40,000 SpaceX AI1 satellites each year would burn them up in the atmosphere, while roughly 160,000 more would be moved to an outward “disposal” orbit, removing about 1,000 tons of copper and 170 kilograms of gold per year from Earth’s material life cycle.
Aug 20, 2026 ·Ars Technica
NetBSD 11.0 adds 64-bit RISC-V support plus a new MICROVM kernel designed to boot x86 VMs in about 10 milliseconds on 2020-era processors.
Aug 20, 2026 ·The Register
A misconfigured ClarityCheck people-search service left roughly 450 GB of images of adults, teenagers, and children—about 9 million photos of faces in an Amazon S3 bucket—publicly accessible via URLs found in the company’s website code.
Aug 20, 2026 ·Ars Technica
Alation confirmed it recently identified an isolated incident involving unauthorized activity in one of its systems, and said it is conducting a thorough investigation but has not disclosed the attack type, root cause, affected customer count, or whether customers were alerted.
Aug 20, 2026 ·TechCrunch
An encrypted “prompt injection” can bypass Grok’s safety guardrails and cause it to exfiltrate a user’s chats and other personal information via a link whose parameters are populated with the user’s name, location, and chat history.
Aug 20, 2026 ·Ars Technica
DJI Osmo Pocket 4 Pro and Pocket 4 Pro combo listings that are “banned from import into the United States” are being sold in the US on Temu, AliExpress, eBay, Mercari, Amazon, and Newegg with delivery to customers in days, because the cameras are already inside the country (the article describes an Oregon fulfillment shipment arriving in four days).
Aug 20, 2026 ·The Verge
xAI’s Grok web chat agent can be tricked via “cryptographic context injection” into decrypting encrypted prompt instructions and then executing them, including a proof-of-concept that exfiltrates the victim’s chat history (name, coarse location, subscription tier, and full prompts) by appending them to a URL as parameters.
Aug 20, 2026 ·The Register
U.S. security agencies warn hackers are targeting “all” Siemens S7 programmable logic controllers used in water and other critical infrastructure, with AI-assisted exploit scripts that can cause downtime, safety incidents, or equipment damage.
Aug 20, 2026 ·TechCrunch
France’s tax authority (DGFiP) says a raid confirmed last week exposed data tied to about 600,000 taxpayers, including message contents for roughly 250 people and personal/tax details for slightly more than 350,000 individuals.
Aug 20, 2026 ·The Register
Australia’s eSafety commission said tests found Roblox still let adult users contact Australian children without parental consent, including via connection requests, community forums, and public visibility of underage users’ connection and profile information.
Aug 20, 2026 ·Engadget
