Thank you. Next. The IT Privacy and Security Weekly Update for the Week Ending April 29th., 2025

EP 240.  For this week's update:  
A major employee monitoring tool suffered a data breach, exposing over 21 million sensitive screenshots due to a misconfigured cloud storage bucket. An example of when your productivity app tracks everything — and accidentally shares it with the world.
 Anthropic warns that AI-based virtual employees may arrive within a year, bringing unprecedented operational and security challenges.  Meet your new colleague: tireless, credentialed, and occasionally rogue.
New reporting shows tech industry employees are facing increased workloads, stagnant compensation, and persistent layoff fears amid shifting market dynamics — just like every other job.
A sophisticated new phishing-as-a-service kit, Darcula, uses AI and modern messaging platforms to scale and personalize cyberattacks. Malware just got a UX upgrade — and it speaks 14 languages.
Oracle engineers accidentally caused a multi-day outage at U.S. hospitals, disrupting electronic health records and operations — just a regular Tuesday in enterprise IT.
Google reports that most real-world zero-day cyberattacks in the past year were linked to government-backed hacking groups. Nation-states still top the leaderboard for exploiting what vendors haven’t patched.
New Android spyware is targeting Russian military personnel, using a trojanized mapping app to exfiltrate sensitive data — looks like someone's tracking the trackers.
As automakers push subscription-based features, law enforcement is tapping into connected car data, raising privacy and surveillance concerns. You're not just paying monthly for heated seats — you're funding roadside surveillance.
​Thank you.  Next...

Find the full transcript for the podcast here.