Infosec Archives - Measured Collective

ICO secures over £118,000 in confiscation orders against former RAC employees — why employee access abuse still demands hard controls

Scott Dooley — Sat, 06 Jun 2026 07:20:23 +0000

On 4 June 2026, the Information Commissioner’s Office said it had secured £118,852.32 in confiscation orders against two former RAC employees. This was not a corporate GDPR fine. It was the next stage of a criminal case about staff copying and selling personal data. The management lesson is still immediate: if customer records can be ...

The post ICO secures over £118,000 in confiscation orders against former RAC employees — why employee access abuse still demands hard controls appeared first on Measured Collective.

Flock’s AI Surveillance Cameras Were Wide Open on the Internet—Here’s What That Means

Scott Dooley — Sat, 17 Jan 2026 09:55:49 +0000

For an unknown period, at least 60 AI-powered surveillance cameras manufactured by Flock Safety were accessible to anyone on the internet. No password required. No login needed. Just a web browser and the camera’s IP address. The exposed devices were Flock’s Condor PTZ cameras—sophisticated systems that can pan, tilt, zoom, and use artificial intelligence to ...

The post Flock’s AI Surveillance Cameras Were Wide Open on the Internet—Here’s What That Means appeared first on Measured Collective.

Confer: Signal’s Founder Builds an AI Chatbot That Can’t Spy on You

Scott Dooley — Sat, 17 Jan 2026 09:55:47 +0000

When you type a message into ChatGPT, Claude, or Google’s Gemini, you’re sharing information with a company that stores, analyses, and may use that data in ways you cannot control. This creates a problem that Moxie Marlinspike—the cryptographer behind Signal’s encryption protocol—believes we’re underestimating. Marlinspike’s solution is Confer, an AI chatbot launched in late 2025 ...

The post Confer: Signal’s Founder Builds an AI Chatbot That Can’t Spy on You appeared first on Measured Collective.

The UK Cyber Security and Resilience Bill: What Data Protection Officers Need to Know

Scott Dooley — Wed, 31 Dec 2025 12:34:07 +0000

The UK Government introduced the Cyber Security and Resilience Bill in November 2025, proposing significant changes to how organisations manage and report cyber security incidents. For Data Protection Officers, this Bill raises important questions about how new cyber security obligations might interact with existing data protection duties. Before we proceed, a crucial point: this is ...

The post The UK Cyber Security and Resilience Bill: What Data Protection Officers Need to Know appeared first on Measured Collective.

EU NIS-2 Management Liability: The SonicWall Breach Test Case

Scott Dooley — Tue, 14 Oct 2025 19:44:53 +0000

In October 2025, SonicWall revealed the full scope of a September breach: attackers had stolen ALL cloud-stored security configuration backups, not the initiall...

The post EU NIS-2 Management Liability: The SonicWall Breach Test Case appeared first on Measured Collective.