Grafana Labs, a prominent open source analytics and monitoring company, has confirmed that attackers gained unauthorized access to its GitHub account and exfiltrated a significant portion of its private codebase. This incident highlights critical vulnerabilities within software supply chains, emphasizing how a compromise at one foundational vendor can propagate risks throughout numerous downstream organizations. The company is actively investigating the scope of the breach and assessing potential impacts on its products and customer data.
Employee consent under GDPR Article 7 is generally considered problematic because:
The inherent power imbalance in the employment relationship means consent is unlikely to be freely given, as employees may fear negative consequences for refusing
Employees are always enthusiastic about consenting, as specified under the employment data provisions, with particular attention to documentation requirements
Employment contracts automatically constitute consent, under the employment relationship processing framework
Allowed exclusively through formal approval processes with documented justification, as specified under the employment data provisions, under the conditions specified by applicable law
Linus Torvalds, the creator of Linux, has expressed significant frustration over the influx of bug reports generated by AI powered tools, rendering the Linux security mailing list "almost entirely unmanageable." While AI can aid in vulnerability discovery, the sheer volume of often unsubstantiated or low quality reports creates a significant burden for human maintainers, potentially obscuring genuinely critical issues and impacting the efficiency of security patching.
OpenAI was impacted by a supply chain compromise involving TanStack npm packages, stemming from compromised employee devices. This incident underscores the persistent challenge of securing developer environments and third party dependencies, even for leading AI companies. The breach highlights how sophisticated attackers can leverage compromised employee endpoints to inject malicious code into widely used software libraries.
Members of Parliament are pushing for social media platforms to be regulated with the same scrutiny as physically unsafe products rather than harmless apps. This move would significantly increase accountability for content moderation, algorithmic design, and data practices that impact user well being, particularly among children and vulnerable populations. Such a regulatory shift could impose stricter safety standards and legal liabilities on social media companies.
Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.