AI and GDPR Monthly Update – Dentons

It usually starts with a small, uneasy moment.  A login alert you don’t remember triggering. A password that suddenly doesn’t work. A friend asking why you just posted something… bizarre.  Sometimes it’s even worse: you open your Facebook Page and realize you’re no longer an admin.  Facebook account takeovers often don’t look dramatic at first. They start quietly: a new device login, a recovery email…

The Pierce County Library System has reached a settlement in a class action lawsuit arising from a 2025 cybersecurity breach that compromised the personal data of over 340,000 people.   In April 2025, the Pierce County Library System experienced a significant data breach that exposed the personal information of more than 340,000 individuals. The incident…

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as ProfSvc, is a core system component that manages user accounts and environments. “The PoC…

Here’s a question that keeps CISOs up at night: if OpenAI and Anthropic both promise not to train on your company’s data, why does sensitive corporate information keep ending up in AI models anyway? The answer, it turns out, has less to do with the AI companies and more to do with Karen from accounting…

Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that’s capable of targeting Windows, Linux, and macOS environments. According to LevelBlue, the cross-platform malware is advertised under a malware-as-a-service (MaaS) model, costing anywhere between $150 for one month to $1,200 for lifetime access. Other subscription tiers include $300 for three months,…

A China-linked hacking group has been observed expanding a network of hijacked devices used to disguise cyber-attacks, arming it with several newly discovered pieces of custom malware, researchers have found. Cisco Talos said the actor, an advanced persistent threat (APT) group it tracks as UAT-7810, built what are known as Operational Relay Box (ORB) networks,…