Source: CSO Online

3 stories in the last 30d

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Industry 13 AI safety & security 9 Exploit / PoC 7 Vulnerability 5 Threat actor 4 AI industry 4 Tools 3 Policy & legal 3 Advisory 3 Phishing & fraud 2 Data breach 2 Malware 2 Research 1 AI tools & infra 1

SeverityAll critical 5 high 18 medium 3 low 0 info 34 source: CSO Online ✕

LinkedIn fights for the right to tell customers when the feds want their data

Microsoft's chief legal officer argues federal subpoenas for LinkedIn user data should carry narrower scope and that secrecy orders must become the exception.

Microsoft chief legal officer Jon Palmer said federal courts and Congress must curb overly broad US government subpoenas for LinkedIn user data that arrive with secrecy orders preventing customer notification. The company is asking courts to enforce meaningful limits on demand scope and secrecy, invoking Fourth and First Amendment arguments. Palmer cited House legislation passed August 31 to rein in secret surveillance, while LinkedIn simultaneously faces user privacy lawsuits, one dismissed with leave to amend by Judge Vince Chhabria.

CSO OnlineSep 16, 19:50 UTC · 17h agoPolicy & legal

You don’t have to join the hack-back program to inherit its risk

A new US presidential memorandum creates a vetted private hack-back program, leaving participating vendors and their customers with untested legal liability and collateral risks.

The August 12 National Security Presidential Memorandum directs the National Coordination Center, run jointly by DOJ and DHS, to approve covert surveillance and disruptive Cyber Effects Operations by vetted private companies, with a forfeitable bond of at least $1 million required as a contract condition. The analysis argues the criminal shield rests on an untested reading of the CFAA exemption at 18 U.S.C. 1030(f), with no civil safe harbor, no state-law preemption and no foreign-law protection. Non-participating organizations can still inherit risk through shared infrastructure collateral damage, lack of customer disclosure, Lloyd's bulletin Y5381 state-backed attack exclusions, and threat-intelligence pipelines feeding offensive proposals.

CSO OnlineSep 16, 09:00 UTC · 1d agoPolicy & legal

What the 3M ChatGPT case reveals about AI governance

3M litigation shows ChatGPT prompts can become discoverable evidence, forcing enterprises to govern AI conversation records.

In the Watson Grinding explosion litigation, an engineering expert retained by 3M had used ChatGPT, and a surfaced prompt asked the system to 'show how 3M is 0% at fault'; after an off-record deposition demand, more than 350 pages of previously unproduced ChatGPT material were provided. The author argues AI interaction histories are becoming part of decision records and discovery material, a trend the American Bar Association has already examined. Enterprises are urged to manage retention, ownership, sharing, and deletion of AI conversation logs across tools like ChatGPT, Copilot, Claude, and Gemini.

CSO OnlineSep 14, 09:00 UTC · 3d agoPolicy & legal