Security News Update for December 14, 2025

This week’s news includes:

• Ring (Amazon) Releases (Illegal in Some States) Privacy Nightmare
• Does Your Security Team Have the Authority to Take Instant Actions?
• India Backs Off on Mandatory Installation of Government Snooping App
• Is SAML Based SSO Fatally Broken?
• Is SAML Based SSO Fatally Broken?
• AI Alerts
• CMMC Q&A
• President Signs Executive Order to go After State AI Laws he Doesn’t Like
• The AI Executive Order – Nothing as Complicated as AI is Simple
• Petco Confirms Breach and Data Theft
• Iberia Airlines Newest Airline Hit By Cyberattack
• Asus Confirms Supplier Breach – Same Gang as Above
• Dataset Containing 4.3 Billion Records Leaked Without Password; Owner Unknown
• 700Credit Data Breach Affects at Least 5.6 Million
• White House and Congress AI strategy
• How old school voice phishing still works very effectively
• If firewall companies can’t secure themselves ….. What do we do?
• Security News for the week ending December 12, 2025: banks (maybe) are tired of giving the North Koreans your money, bug in jury systems used in several states leak sensitive personal info, big brother is watching – at least in New York City, CISA warns of Russia-financed attacks on water, energy and food sectors and utilities turn to Washington state lawmakers as copper wire theft surges

• Audio
• Video