Privacy & Data Security

On October 22, 2026, Pennsylvania Governor Shapiro signed the Artificial Intelligence Deceptive Advertising Act, setting disclosure rules for AI ads in the state.

The Act defines “synthetic content” broadly to include images, video, audio, or text significantly modified or generated by AI. It prohibits advertisers from knowingly, recklessly, or willfully creating or disseminating ads that…

My buddies at CrowdStrike have uncovered a campaign launched by threat actor VAPOR PANDA starting on October 17, 2026, where ARTEX (an AI-powered penetration testing tool developed in China) is used with the Chinese-developed DeepSeek LLM to attack “more than 200 distinct organizations worldwide, including foreign ministries in Latin America, Europe, Asia, and the Middle…

The legal profession’s apprenticeship model has never been as reliable as many might think. Junior lawyers do not automatically learn from late-night proofreading, routine markups, or being assigned work without guidance. Their development often depends on being paired with a senior lawyer who has the time and skill to teach, and work on matters that…

On October 26, 2026, a federal judge denied ed-tech provider PowerSchool’s motion for partial judgment, keeping a California medical-privacy claim alive in In re PowerSchool Holdings, Inc. & PowerSchool Group, LLC Customer Security Breach Litig., No. 25-md-03149-AJB-MSB, slip op. at 12 (S.D. Cal. Oct. 26, 2026).

The case stems from a 2024 data breach that…

Corporate legal departments are increasingly looking to see how outside counsel use artificial intelligence (AI). At a recent DRI, Association of Lawyers Defending Business conference, legal leaders from Bayer, Fifth Third Bank, and Progressive discussed how AI is entering outside-counsel guidelines and requests for proposals. One panelist captured the competitive shift: outside counsel who learn…

Security Company Arctic Wolf has reported that it has documented more than 400 incidents where threat actors flooded employees’ inboxes with spam, to the point of extreme frustration, then used Teams to contact the frustrated employee posting as IT support to assist in fixing the problem. The Teams contact comes within minutes of the flooding…