Privacy & Governance

Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem

Bias in Qwen3-Coder Model

Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the mod…

The Vulnerability Apocalypse and Why We Should Fund Open Source

If you use the internet at all, you may have noticed that a large percentage of sites suddenly went down earlier this week—and all…

Computer Security Is About to Get a Lot Worse, Here’s What You Can Do

It is a commonly held truth among computer geeks that there is no such thing as bug free software, or a secure computer. Any piece…

Friday Squid Blogging: Increasing Squid Populations

This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also us…

Two States Can Now Restrict Social Media Access—Here’s What To Do Next

Last week, two federal appeals courts issued opinions that will allow Florida and Georgia to start enforcing laws that will age-ga…

Compromised TLS Certificates

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defec…

Canadians Are Running Out Of Time To Oppose The Dangerous C-22 Surveillance Bill

Canada’s Parliament is debating a massive expansion of surveillance powers that will threaten the privacy and security of millions…

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities…

Introducing Our New Surveillance Self-Defense Guide: Online Privacy for Parents and Youth

The internet is a vast and confusing place no matter your age. Trying to help youth engage with it safely and privately is a compl…

Interoperability vs. Security: Why not both?

An open internet where people can freely build, share, and remix each other's work is a powerful engine of grassroots innovation w…

EFF to Brazil’s ANPD: Data Privacy and Free Expression Must Underpin Platform Regulations

The Brazilian National Data Protection Agency (ANPD) plays a pivotal role in the regulation of digital platforms according to new…

EFF’s State Legislative Agenda to End ALPR Mass Surveillance

Police agencies across the U.S. have deployed Automated License Plate Readers (ALPRs) to capture images of passing vehicles along…

EFF Launches Guide to Help Parents and Youth Protect Privacy Online

Guide Includes Easy, Quick Ways To Identify and Protect Against Online Threats SAN FRANCISCO – The Electronic Frontier Foundat…

Workshop on Economics and Information Security (WEIS) Archive

There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Reall…

Victory! Court Rules OPM Data Disclosure to DOGE Is Unlawful

In a victory for data privacy, a federal court in New York definitively ruled that the Office of Personnel Management (OPM) violat…

Possible new Cellebrite iPhone Radio Zero-Day

Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU…

Require Police to Get a Warrant to Search ALPR Data

This post was co-written by Andi Cao, an EFF legal intern. Automated license plate readers (ALPRs) are mass surveillance. They pho…

Announcing Privacy Badger for Safari on macOS

Exciting news for Safari users: Privacy Badger is now available on Safari for macOS! You’ll need Safari version 26.5 or higher to…

EFF Launches Privacy Badger for Safari on macOS

Free Tracker Blocker Used by Millions Will Protect Even More Users' Privacy SAN FRANCISCO—Privacy Badger, the award-winning tra…

Training AIs to Solve CAPTCHAs

Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the ag…

Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact

New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you…

Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal

Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’

Backdooring Open-Weight AI Models

This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a m…

In Memoriam: Barry Steinhardt

Barry Steinhardt, a lifelong privacy champion and an early leader in the battle for digital civil liberties who served as EFF’s pr…

Our Lawsuit Against the Trump Administration’s Social Media Surveillance Moves Forward. Here’s What the Court Said.

No one should have to choose between speaking freely and protecting their immigration status. Yet that’s precisely the choice the…

Measuring Human Cryptanalysis Effort

Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different publ…

Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal

Proofpoint to Acquire Varonis in $6.3 Billion Cybersecurity Deal