Enforcement of California’s Delete Act is accelerating. The California Privacy Protection Agency (CPPA) recently sent a clear message to data brokers: register, pay the required fee, and be prepared to defend your data practices, especially when they involve sensitive populations.
CPPA announced recent settlements with two data brokers totaling more than $100,000 for failing to…
A new California trial court decision offers website operators some long-awaited relief in the ongoing wave of website privacy suits under the California Invasion of Privacy Act (CIPA). In early December, the Los Angeles County Superior Court, rejected an increasingly common theory that routine website analytics and tracking tools function as illegal “pen registers” or “trap…
As we have warned before, threat actors using QR codes in attacks against victims continue to rise. To illustrate the risk, on January 8, 2026, the FBI issued a FLASH alert, entitled “North Korean Kimsuky Actors Leverage Malicious QR Codes in Spearphishing Campaigns Targeting U.S. Entities.”
The alert warns that North Korean state-sponsored actors (Kimsuky)…
Happy New Year! 2025 was a busy year for the Insider authors—we published 271 posts throughout 2025. To kick-off 2026, in case you missed them last year, we are providing the articles from 2025 that were the most interesting to our readers across various categories.
We hope you enjoy them and look forward to another…
On January 1, 2026, broad new privacy laws will take effect in Kentucky, Indiana, and Rhode Island, granting consumers in those states greater control over their personal data. With these additions, 19 states now have comprehensive privacy laws in place, which is a significant shift in the data privacy landscape since California led the way in 2018 with the…
TransUnion has announced that attackers gained unauthorized access to a third‑party application used in its U.S. consumer support operation that is reported to be linked to a broader wave of attacks targeting Salesforce‑connected applications across major industries.
The breach affected more than 4.4 million individuals, but TransUnion emphasized that its core credit reporting systems were…
While the disruptive potential of generative AI in legal services dominates headlines, the real story lies with the individuals making that transformation possible. For in-house legal teams and law firms facing rapid shifts in regulation and technology, upskilling has evolved from a competitive advantage into the foundation of any successful AI strategy.
Technology Isn’t the…
December 2025 saw India’s courts in New Delhi and Mumbai tackle a new breed of lawsuits: leading Indian cinema celebrities fighting back against unauthorized deepfakes and AI-generated impersonations. Nandamuri Taraka Rama Rao (NTR Jr.), R. Madhavan, and Shilpa Shetty—all famous Indian actors—filed and won powerful court orders aimed at blocking the spread of synthetic images,…
California’s strict privacy laws, particularly the California Invasion of Privacy Act (CIPA), are fueling a surge in class action lawsuits against major companies over their use of online tracking technologies. In recent weeks, prominent brands including Estée Lauder, Nike, and Luxottica have been hit with proposed class actions in the Northern District of California, all…
Threat actors had another banner year in 2025. As we head into 2026, looking back on the five top security threats of 2025 may inform our strategy and budgeting for 2026 to prepare for the continued onslaught of attacks.
According to Dark Reading, the top five security threats from 2025 include:
Salt…
