January 25th, 2026

• Facing Civil Litigation and Criminal Charges, Grok Will Block CSAM and Some Other Sexual Image Generation
• Rushing AI Implementation Can be Hazardous to Your Company
• Samsung Plans to Deploy AI to 800 Million Galaxy Devices – What Could Go Wrong?
• Health AI Companies Vacuuming Your Health Data; Epic, Others Sue Them
• CMMC Q&A
• Cisco Patches Bug That Could Result in Complete System Takeover
• Trump Administration Admits DOGE May Have Shared Social Security Information with a Third Party
• Danger of Giving the Gov Your Data
• Middletown, Ohio Resumes Water Billing FIVE MONTHS After Cyberattack

Security News for the week ending January 23rd, 2025

This week’s news: Mandiant Pushes Companies to Dump Old Microsoft Authentication by
Releasing a Way to Crack It, EPA Nixes Clean Air Exemption for Data Center Generators,
Tesla, Sony and Alpine Compromised on Day 1 of Pwn2Own Auto 2026, Microsoft Turned Over
Your Encryption Keys to the Feds, and TikTok Forms US Joint Venture to Continue US
operations – maybe?

Read details here.

As AI gets injected into everything, everywhere, you need to be ready. Saying that you
don’t have time will just move you to the end of the line. Check out our Certified AI
Governance Leader Course at AIGIP.AI. Please contact us for assistance.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

January 18th, 2026

• UK Online Safety Act to Mandate Scanning of Your Emails and Social Media, Even if Encrypted
• FTC’s Data Sharing Order Against GM is Final
• Apple Picks Google’s Gemini to Run AI-Powered Siri
• Kentucky Sues Character.AI, Says it Harms Kids and Violates Data Law
• Anthropic Releases Early Beta of Claude CoWork – And Points Out Security Risk
• Small Cities Left Out of AI Conversations
• CMMC Q&A
• CISA Releases Version 2 of Cross-Sector Cybersecurity Performance Goals (CPGs)
• Amazon Patches AWS CodeBuild (Hopefully) Before Hackers Found it
• Texas App Store Accountability Act Enjoined
• Kaiser Settles for $556 Million in False Claims Act Case
• Elon’s Child 13 Momma is Suing Him/X For Failing to Limit Deepfakes of Her
• Anchorage Police Hit By VENDOR Cyberattack

Security News for the week ending January 16th, 2025

This week’s news: Musk’s AI company working to limit CSAM and nude fakes, hackers claim to
be selling Target’s data and source code, ICE agent doxxing platform crippled after DDoS
attack, OpenAI says ChatGPT will show ads, but not influence answers and Trump officials
might boycott RSA conference because Jen Easterly is CEO.

Read details here.

If you are beginning to implement AI but are concerned about AI governance, you are not
alone. Please contact us for assistance.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

January 11th, 2026

• Twitter’s Grok Pushing Child Porn Mainstream – Now Only for Paying Customers
• Reddit Sues AI Company Perplexity and Others for Stealing Data
• Board to CISO/CEO: Who Approved This (AI) Access and Who is Accountable?
• xAi Sues California Over Law Requiring Them to Reveal Training Data
• Potential Way to Protect Sensitive Data in AI Systems
• CMMC Q&A
• Teledyne Settles Another False Claims Act Case
• Cyber Insurance Companies Recommend New Security Practices
• “Tinder for Nazis” Hit by 100 Gig Data Leak
• NordVPN Hacked – Well, Maybe Not

Security News for the week ending January 9th, 2025

This week’s news bites: Anna’s Archive steals 300 Terabytes of music from Spotify and calls in
“preserving” it, cameras were everywhere (guess where), Californians have a new website to
block data brokers, the NSA has new placeholder leaders in cybersecurity and DoD appoints
new NSA deputy Director who seems to be very competent and does not require Senate
approval.

Read details here.

Implementing recommended practices from the cyber insurance industry can be done
incrementally. Start with the ones that your own insurance carrier is pushing you to do but
then work on the rest of the recommendations in the EDUCATION section. If you need
assistance, reach out to us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

January 4th, 2026

• Pornhub Extorted After Vendor Breach
• OWASP Top 10 for Agentic AI Applications for 2026
• Nvidia Joins the Large Language Model for Real
• Law Firm Hagens Berman Sanctioned Over AI Hallucinations
• AI’s Elections Impact Likely to Grow in 2026
• New Texas AI Law Goes Into Effect January 1
• New York Governor Signs New AI Law
• AI-Cybersecurity Trends for 2026
• CMMC Q&A
• CISA Releases Cross-Sector Cybersecurity Performance Goals Version 2.0
• Apple Patches More Zero-Days in ‘Sophisticated Attack’
• New York is the Most Recent State to Ignore President’s AI EO
• Almost 20 Million Affected by Two Breaches, But There Are Many More
• Aflac Confirms Breach Exposed Data on 22 Million Customers

Security News for the week ending January 2nd, 2026

This week’s news bites: Russia hits critical infrastructure via network edge devices, Texas judge
tells HiSense to stop collecting user data, another undersea cable cut, CISA loses key
employee behind early cyber warnings and Senate Intel chair asks White House to address
open source risk.

Read details here.

OWASP Top 10 for Agentic AI – If you are into AI and the intersection of AI and cybersecurity,
then this is for you. If it doesn’t make a lot of sense, however, please reach out to us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]