Policy & Regulation — Page 13

Tasmania Becomes Last Australian State to Outlaw Non-Consensual Sharing of Intimate Images
After years of victims being turned away by police with no clear law to apply, Tasmania's government has announced it will criminalise the sharing — or threatening to share — intimate images without consent, including AI-generated fakes.

AI-Powered Street Cameras Are Quietly Building a National Surveillance Grid — And Some Cities Are Walking Away
Cameras made by Flock Safety scan licence plates and flag vehicles automatically. Critics say the resulting data is a federal immigration agency's dream. A growing number of communities are cancelling their contracts.

US Lifts Export Controls on Anthropic's Fable AI After Two-Week Freeze
The Commerce Department cleared Anthropic's most powerful AI model for international customers following a government review triggered by fears the system could be used to assist serious cyberattacks.

Australian Health Websites Secretly Fed Patients' Fertility and Medication Searches to Meta and TikTok
Australia's privacy regulator has ruled that Monash IVF and Medmate broke the law by embedding invisible tracking code on their health websites — code that sent sensitive visitor data to social media giants without asking anyone's permission.

American Tech Is Quietly Powering the Global Scam Machine
A joint investigation by AP and FRONTLINE found that tools built by US companies are helping criminals run fraud operations at industrial scale, and most victims never see it coming.

Australians Are Safer Online Than Last Year — Unless They Run a Small Business
A new government survey found cybercrime fell across Australia in 2025, but small business owners are facing more legal and staffing fallout than ever before.

CISA's New Playbook Nudges Agencies Toward Zero Trust — and Everyone Else Can Read Along
The agency's updated TIC 3.0 guidance folds Secure Access Service Edge into federal network modernisation, and the advice travels well beyond government.

Twitter's Former Security Chief Filed an 84-Page Federal Complaint Accusing the Company of Hiding Security Failures From Regulators
Peiter Zatko says Twitter misled a federal watchdog, left half its servers unprotected, and may have foreign spies on staff. Twitter calls him a disgruntled ex-employee. Congress says it wants answers.

CISA orders federal agencies to patch SharePoint flaw by Saturday as attacks begin
A newly exploited Microsoft SharePoint bug lands in CISA's Known Exploited Vulnerabilities Catalog, triggering a three-day patching clock under Binding Operational Directive 26-04.

Google loses final EU appeal, must pay €4.1 billion Android fine
The bloc's top court has ended a seven-year fight over how Google used Android to push its search engine and Chrome browser onto phones.

Chris Inglis on the Snowden Era: What NSA Got Wrong, and What CISOs Should Still Be Asking
The former NSA Deputy Director reflects on institutional failures, insider threat detection, and why 'enculturation' may matter more than access controls.

Microsoft Tightens Teams Meeting Controls for External AI Bots
A new admin policy requires organizer approval before automated external participants can join Teams meetings, a quiet but consequential shift in how enterprises govern AI access to sensitive calls.

Behavioral AI Pitched as Answer to Identity-Abuse Phishing, But Regulators Still Set the Bar
A vendor webinar makes the case for behavioral detection against BEC and account takeover. The compliance questions sit underneath.

Claude Fable 5 Comes Back Online as Commerce Drops Export Curbs
Anthropic restores Fable 5 across Claude.ai, the Claude Platform, Claude Code, and Claude Cowork on July 1 after a roughly two-and-a-half-week U.S. export restriction is lifted.

Supreme Court Extends Fourth Amendment Shield to Cell-Site Location Data
A geofence warrant case gives the Court a vehicle to rule that historical location records tied to a phone are constitutionally protected, full stop.