Android Malware, Data Breach, EU Surveillance – 11/05/2025

November 4, 2025
Android Malware, Data Breach, EU Surveillance – 11/05/2025

Today’s privacy landscape is marked by critical developments in AI-powered malware, data breach regulations, and surveillance practices. Malicious Android apps are impacting millions, while California tightens data breach notification timelines. Also, the sale of EU officials’ location data raises serious concerns about privacy and security.

Top 5 Critical Privacy Alerts

  • Malicious Android apps on Google Play downloaded 42 million times: Hundreds of malicious Android apps were downloaded over 40 million times. Read more
  • California tightens data breach notification timelines: Covered companies must notify affected California residents within 30 days of a data breach discovery. Read more
  • Phone location data of top EU officials for sale: Journalists found it easy to spy on top EU officials using commercially obtained location histories. Read more
  • DHS proposes biometrics expansion for immigrants: DHS is looking to increase its collection of biometrics, including from some U.S. citizens. Read more
  • Google warns of new AI-powered malware families: Adversaries are using AI to deploy new malware families that integrate LLMs during execution. Read more

Privacy Laws & Regulations

  • California Finalizes Updates to Existing CCPA Regulations: Updates to CCPA regulations expand business obligations and cover cybersecurity audits. Read more
  • California tightens data breach notification timelines: Covered companies must notify affected California residents within 30 days of a data breach discovery. Read more
  • When sharing your info online leads to unwanted telemarketing calls: Learn how companies trick you into sharing info to sell to telemarketers. Read more
  • Who’s eligible for a refund from Amazon?: Amazon agreed to pay $2.5B for enrolling users in Prime without consent, making cancellation hard. Read more

Regulatory Fines & Enforcement Actions

  • Facebook’s job ads algorithm is sexist: French regulator rules Facebook’s job ad algorithm is discriminatory, skewing ads by gender. Read more
  • US sanctions North Korean bankers linked to cybercrime: The U.S. Treasury Department imposed sanctions on North Korean financial institutions involved in laundering stolen cryptocurrency. Read more

Surveillance

  • Phone location data of top EU officials for sale: Journalists found it easy to spy on top EU officials using commercially obtained location histories. Read more
  • DHS proposes biometrics expansion for immigrants: DHS is looking to increase its collection of biometrics, including from some U.S. citizens. Read more
Distribute Intel
Chris Armour
Director of Software Engineering
Chris Armour
The Breaker & Builder.

Operating on the philosophy that 'you can't build a secure system if you don't know how to break it,' Chris leads our engineering division. A top 1% National Cyber League competitor, he hardens our digital infrastructure against the very exploits he has mastered.

Press & Media

Media Inquiries

For expert commentary, interview requests, or high-res assets regarding this announcement, initialize the terminal.

Initialize Terminal

Initiate
Deployment.

Whether you need a full adversarial facility audit or an executive resilience protocol for your leadership team.

Secure the Facility (Assessments)
Secure the Mind (Coaching/Speaking)