Phishing is the practice of tricking people into revealing sensitive information, and has long been a top cyber threat. But in 2025, phishing has entered a new era: attackers are now using AI tools to generate highly convincing and customized phishing messages at scale.

In 2016, computer scientist Joy Buolamwini made a striking discovery at the MIT Media Lab—facial analysis software could not detect her face unless she wore a white mask, due to biased training data favoring light-skinned individuals.

Health and wellness apps have surged in popularity, but their privacy practices are often murky. An analysis of 10 top apps — from fitness trackers to meditation and period-tracking apps — reveals that most collect far more data than necessary and reserve the right to share it with advertisers or data brokers.

AI-powered hiring tools are being adopted by companies large and small, promising to streamline recruitment and reduce human bias. But recent investigations have raised serious concerns that these systems may actually amplify discrimination rather than prevent it.

Despite growing public awareness and new privacy laws, data broker companies that buy, sell, and aggregate personal information continue to thrive. These firms compile data from credit reports, social media, app usage, and even offline purchases, building profiles that can include thousands of data points per person.

AI is transforming consumer lending, promising faster credit decisions and greater access. But the reality is more complicated. Many AI-based scoring systems rely on alternative data — utility payments, online behavior, even social media activity — to predict creditworthiness.

New Orleans is at the center of a national debate as it considers an ordinance to legalize real-time facial recognition surveillance across the city.

Microsoft has appointed Cari Benn as its new Chief Privacy Officer (CPO), a move seen as a renewed pledge to place privacy and trust at the heart of its global operations.

Europe’s landmark AI Act has officially entered the implementation phase, ushering in one of the world’s most comprehensive frameworks for governing artificial intelligence. The law targets high-risk AI systems, including biometric identification, predictive policing, and AI in critical infrastructure, with strict requirements for transparency, human oversight, and risk assessments.