Security Boulevard

Flock surveillance faces a constitutional setback. An Oklahoma federal judge ruled that police violated the Fourth Amendment by using historical ALPR records to reconstruct a motorist’s movements without a warrant, ordering the evidence suppressed. Aggregated location data changes the privacy equation.

*** This is a Security Bloggers Network syndicated blog from ManagedMethods Cybersecurity, Safety & Compliance for K-12 authored by the team. Read the original post at: https://managedmethods.com/blog/how-to-block-distracting-websites-in-the-classroom/ Chromebooks, laptops, and other connected devices have become essential tools in K–12 classrooms. They give students instant access to educational resources, digital assignments, collaboration tools, and other learning opportunities.

The surveillance starts before the search. The legal debate surrounding Flock’s license plate readers often focuses on when police query historical records. But the more fundamental privacy question is whether continuously collecting and storing everyone’s movements already constitutes surveillance. One observation is not the same as a searchable history.

*** This is a Security Bloggers Network syndicated blog from GitGuardian Blog – Take Control of Your Secrets Security authored by the team. Read the original post at: https://blog.gitguardian.com/ai-hooks-ai-coding-assistants/ TL;DR Instructions are suggestions, not controls: Prompts, AGENTS.md, and CLAUDE.md files only guide an agent, which can reinterpret or route around them. Security needs deterministic controls that hold no matter how the agent reasons.

*** This is a Security Bloggers Network syndicated blog from Salt Security blog authored by the team. Read the original post at: https://salt.security/blog/your-ai-transformation-needs-runtime-protection-for-the-whole-agentic-estate Why runtime protection from prompt to action is essential AI Detection and Response (AI-DR), also called AI runtime security, is quickly becoming a must-have. Prompt injection, jailbreaks, and data leakage are real, and the prompt is often where attacks begin.

A trusted certificate can fail without being compromised. A faulty Microsoft Defender update in April 2026 reportedly quarantined legitimate DigiCert roots, disrupting trust relationships and potentially affecting TLS connections and software-signature verification. Trust stores are security controls, not passive storage. Adding or removing a root certificate changes which cryptographic identities a system accepts.

*** This is a Security Bloggers Network syndicated blog from Schneier on Security authored by the team. Read the original post at: https://www.schneier.com/blog/archives/2026/10/how-technology-empowers-and-imperils-dictators.html This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs. Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast.

Insignary Launches Clarity AIR: Closing the Blind Spot Between What Your Developers Declare and What’s Actually in Your Code New snippet-level scanning shows security and compliance leaders which open-source code and which AI-written code never made it into a manifest. Insignary Inc.

Key findings from the GRIT Q3 2026 Ransomware and Cyber Threat Insights Report: Ransomware victim volume reached a record high in Q3 2026 The number of threat groups continues to grow TheGentlemen narrowly overtook Qilin as the most active threat group Ransomware payment rates fell, but average payment amounts increased Ransomware targeting is broadening geographically Manufacturing remains the most impacted industry GuidePoint’s Research and Intelligence Team (GRIT) just unveiled the Q3 GRIT...

AI agents are creating a major identity security challenge. Machine identities now reportedly outnumber human identities 109 to 1 in the average enterprise, while many organizations still struggle to assign agent ownership, control permissions and revoke credentials. An agent trust layer can close critical security gaps.