Edition

This is a permanent edition. It carries the briefing exactly as published on this date and does not change.

AI Hallucination Leads to False Espionage Accusation and Lawsuit Against Cybersecurity Vendor

A startup is suing Palo Alto Networks' Koi Security after an AI generated report falsely accused it of involvement in Chinese espionage. This incident highlights the significant risks associated with relying on AI for critical security assessments when those assessments can have severe real world consequences. The lawsuit raises crucial questions about the accuracy, reliability, and legal accountability of AI systems in cybersecurity. It also underscores the potential for AI models to "hallucinate" or generate incorrect yet confidently stated information, leading to reputational damage and legal challenges for affected entities.

Today's question

Under GDPR Article 17, the right to erasure does NOT apply when:

  1. The data subject withdraws their previously given consent, pursuant to the relevant enforcement framework
  2. The controller has no legitimate interest in the data, under the conditions established by the regulation
  3. Data is needed for exercising freedom of expression, under the conditions specified by applicable law
  4. Processing was originally based on a contractual agreement

Answer this question on the site

Worth knowing

  1. Medtronic Notifies Patients of Data Breach Affecting Pacemaker Health Data

    Pacemaker manufacturer Medtronic has warned patients that their health data may have been compromised in a cyberattack. This incident involves highly sensitive medical information, emphasizing the critical importance of robust security measures for healthcare providers and medical device manufacturers. The breach can have significant privacy implications for individuals whose health data could be exploited.

  2. India Demands WhatsApp Justify Username Rollout Amid Security and Privacy Concerns

    India's government has given WhatsApp a three day ultimatum to explain its new username feature, citing security and privacy fears. This move reflects growing regulatory scrutiny over how major tech platforms handle user identity and data. Regulators are concerned about the implications of shifting from phone number based identification to usernames, particularly regarding user anonymity and potential misuse.

  3. Politician Investigating Spyware Abuses Becomes Target of Pegasus Spyware Attack

    A politician actively investigating the misuse of spyware has had their own phone hacked with Pegasus spyware. This incident vividly illustrates the pervasive nature and critical threat posed by sophisticated surveillance tools. It highlights the vulnerability of high profile individuals and the potential for these tools to undermine democratic processes and privacy advocacy.

Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.