Phishing is the practice of tricking people into revealing sensitive information, and has long been a top cyber threat. But in 2025, phishing has entered a new era: attackers are now using AI tools to generate highly convincing and customized phishing messages at scale.

Almost every website now greets visitors with a cookie consent banner, claiming to offer a choice over tracking. But privacy advocates warn that many of these pop-ups are designed not to inform, but to manipulate. Known as dark patterns, these interfaces use visual tricks to steer users toward accepting all cookies, often burying “reject all” options behind extra clicks, small text, or confusing layouts.

AI is transforming consumer lending, promising faster credit decisions and greater access. But the reality is more complicated. Many AI-based scoring systems rely on alternative data — utility payments, online behavior, even social media activity — to predict creditworthiness.

Health and wellness apps have surged in popularity, but their privacy practices are often murky. An analysis of 10 top apps — from fitness trackers to meditation and period-tracking apps — reveals that most collect far more data than necessary and reserve the right to share it with advertisers or data brokers.

Cybersecurity experts are warning about WormGPT, a black-market AI tool designed for criminals. Unlike mainstream AI models that include content filters, WormGPT deliberately omits safeguards, allowing users to generate phishing emails, malware code, and scam scripts at scale.

AI-powered hiring tools are being adopted by companies large and small, promising to streamline recruitment and reduce human bias. But recent investigations have raised serious concerns that these systems may actually amplify discrimination rather than prevent it.

Microsoft has appointed Cari Benn as its new Chief Privacy Officer (CPO), a move seen as a renewed pledge to place privacy and trust at the heart of its global operations.

Europe’s landmark AI Act has officially entered the implementation phase, ushering in one of the world’s most comprehensive frameworks for governing artificial intelligence. The law targets high-risk AI systems, including biometric identification, predictive policing, and AI in critical infrastructure, with strict requirements for transparency, human oversight, and risk assessments.

A new IBM global study highlights a troubling gap between AI policy rhetoric and real-world governance. Although 80% of executives say AI governance is critical to responsible innovation, only 20-30% have put robust practices in place.