Update: Badge Collection for Sale

On June 30, New Jersey enacted A5328, only two days after the bill was introduced, amending the state’s comprehensive privacy law. The backlash was immediate. Businesses and privacy practitioners focused on the law’s unusually high fees, severe penalties, and novel coverage of companies that do not ordinarily identify as data brokers. Political campaigns and voter…

Botnets powered by residential proxy networks are proliferating, enabling cybercriminals of all types to evade detection by blending in with seemingly legitimate traffic, Lumen Technology’s Black Lotus Labs said in a report Friday. The global scale of botnets observed by Lumen is currently approaching 60 million victim IP addresses, Chris Formosa, senior lead information security…

There’s a new boogeyman in the battles over AI: so-called “stealth crawlers.” We’ll admit it—the term “stealth crawlers” sounds quite nefarious. In reality, they’re anything but. “Stealth crawlers” are simply automated tools to access and collect public web data—without disclosing the user’s identity. Private crawlers like these facilitate all kinds of important work that benefits…

After a four-day security suspension, Progress has restored access to its ShareFile Storage Zones Controller. ShareFile is Progress’ flagship enterprise file-sharing service and Storage Zones Controller provides ShareFile customers with private data storage. Progress Software detected “a credible external security threat” on July 10 that prompted the company to temporarily suspend the service. The service…

Last Updated: July 8, 2026 This State Law Privacy Notice (this “Notice”) supplements the Privacy Policy and applies solely to residents of California, Connecticut, Minnesota, Montana, and Oregon (“Applicable State Privacy Laws”). Pursuant to Applicable State Privacy Laws, this Notice provides additional details regarding our collection, use, and disclosure of residents’ personal information that is subject to…

Authorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform with global reach, and its developer was arrested in Indonesia. During the operation, authorities seized more than 200 servers, effectively disrupting the malicious service and rendering it inoperable. The action was led by Frankfurt’s Prosecutor General Office (ZIT), Germany’s…