The Mistake Before the Break. The IT Privacy and Security Weekly Update for the week ending September 16th. 2025.

EP 260 This is our last update before a two week break so we've packed it.
We start with the devastating cyber attack on Jaguar Land Rover exposes the fragility of modern manufacturing, halting production and threatening the UK’s automotive supply chain.
Russia’s state-backed Max messaging app, touted as secure, has become a breeding ground for scams, undermining user trust and safety.
UK schools face a surge in cyber attacks driven by students exploiting weak credentials, revealing critical gaps in educational data security.
A stolen iPhone sparked a security researcher’s investigation, dismantling a global criminal network profiting from phishing and device theft.
Major US airlines are selling billions of passenger records to the government, enabling warrantless surveillance and raising privacy alarms.
A federal court upholds a $46.9M fine against Verizon for illegally selling customer location data, reinforcing privacy protections.
A third of UK employers deploy 'bossware' to monitor workers, sparking concerns over privacy and trust in the workplace.
Undetected Chinese-made radios in US highway infrastructure raise alarms over potential remote tampering and data theft.
Apple’s Memory Integrity Enforcement introduces robust protection against memory-based attacks, setting a new standard for device security.
Google’s VaultGemma pioneers privacy-focused AI, leveraging differential privacy to safeguard user data in large language models.
The AI Darwin Awards spotlight reckless AI deployments, from fast-food blunders to catastrophic data losses, it’s both entertaining and scary at the same time.
Adventures await in the mistake before the break!