Activity

MTN Group, which joined the Global Network Initiative (GNI) - a multistakeholder body that holds tech and telecom companies to independently-assessed freedom of expression and privacy commitments - in 2022, withdrew from the initiative in early 2026 without publicly clarifying its reasons. Yahoo withdrew from GNI around the same time. Ranking Digital Rights' 2026 Telco Giants report flagged the withdrawal as removing an important external scrutiny mechanism over MTN's human rights performance, coming as the company also faced separate scrutiny over a ~5,700-user Ghana data breach and allegations that MTN provided mobile and internet service in DRC rebel-held areas.

Kakao Pay transferred approximately 54.2 billion records of personal information covering roughly 40 million users to Alibaba-owned Alipay between April 2018 and May 2024, without obtaining specific user consent, ostensibly to build credit-risk scores for Apple service payments. South Korea's Personal Information Protection Commission fined Kakao Pay roughly 5.96 billion won and issued a corrective order in January 2025; the Financial Supervisory Service imposed an additional 12.976 billion won fine and institutional warning in February 2026 for violating the Credit Information Act and Electronic Financial Transactions Act; Apple was separately fined for failing to disclose the outsourcing. The Seoul Administrative Court upheld the PIPC penalty on June 11, 2026, rejecting Kakao Pay's argument that users had consented, and Gyeonggi police raided Kakao Pay headquarters on July 6-7, 2026 as part of a criminal investigation into company executives.

SpaceX announced a new Space Situational Awareness (SSA) system called Stargaze, offering it free to all satellite operators via its space-traffic management platform. The system can quickly detect satellite maneuvers and publish updated trajectories, generating new collision data messages distributed to relevant satellites. In late 2025, Stargaze detected a third-party satellite maneuver with just five hours notice that collapsed anticipated miss distance to ~60 meters, allowing a Starlink satellite to react within an hour and plan an avoidance maneuver.

The European Commission fined X (Twitter) EUR 120 million for violations of the Digital Services Act, with the decision published January 30, 2026. Violations included: deceptive blue checkmark design where verification review averaged only 53-79 seconds per account, deliberately obstructed ad transparency repository with artificial 3-minute delays (only 58% of French ads appeared), and blocked researcher data access (95.8% of applications rejected as of May 2024). The fine was levied against X Internet Unlimited Company, X Holdings Corp, X.AI Holdings Corp, and Elon Musk personally.

Venture firm Andreessen Horowitz contributed $50 million to the AI-industry-focused Leading the Future super PAC and $47.5 million to the cryptocurrency-focused Fairshake super PAC, plus over $1 million to the RNC and MAGA Inc., totaling $93.8 million in disclosed 2026 midterm-cycle political spending -- reported as the largest of any single donor tracked for the cycle -- aimed at electing candidates favorable to light-touch AI and crypto regulation.

In January 2026, Snap Inc. settled a bellwether case just days before trial, in which a 19-year-old woman and her mother alleged she developed mental health problems after becoming addicted to Snapchat. The suit accused Snapchat of engineering features like infinite scroll, Snapstreaks, and recommendation algorithms that made the app nearly impossible for kids to stop using, leading to depression, eating disorders, and self-harm. The settlement terms were confidential. The broader MDL included over 2,243 plaintiffs as of January 2026.

Cisco released a patch for a critical vulnerability affecting its Unified Communications and WebEx products that allowed remote code execution. The vulnerability was actively exploited in the wild before the patch was released, representing a significant security risk to enterprise communications infrastructure.

Researchers demonstrated that Google's Gemini AI model could be tricked using prompt-injection attacks to leak private details about a user's calendar. The vulnerability allows malicious actors to extract sensitive personal information through carefully crafted prompts, highlighting security risks in AI systems with access to private user data.

Microsoft issued out-of-band security patches for a high-severity Microsoft Office zero-day vulnerability tracked as CVE-2026-21509, with a CVSS score of 7.8 out of 10.0. The vulnerability allows attackers to bypass document security checks and is being actively exploited in the wild via malicious files. The emergency patch was released outside Microsoft's normal Patch Tuesday schedule due to active exploitation.

The FTC announced a proposed order to settle allegations that cryptocurrency company Nomad (Illusory Systems Inc.) failed to implement adequate security measures leading to a breach in which hackers stole $186 million from customers. The FTC alleged that Nomad prominently touted its security in advertising, claiming 'security-first' services, but failed to live up to these promises by failing to use secure coding practices, implement processes for receiving and addressing vulnerability reports, respond to security incidents, or utilize widely known technologies that might have helped mitigate consumer losses.

Amazon announced a second round of massive job cuts as part of its earlier announced goal of laying off 30,000 corporate employees. The latest cuts removed 14,000 white-collar jobs and affected the company's Amazon Web Services (AWS), retail, Prime Video and human resource units.

Anthropic announced it will match employee donations after employees individually pledged billions of dollars worth of Anthropic shares to charities. The matching program was announced alongside the cofounders' 80% wealth pledge as part of efforts to address wealth inequality from the AI boom.

Dario Amodei, along with all six other Anthropic cofounders, pledged to donate 80% of their wealth, citing concerns about wealth concentration from the AI boom. In an essay titled 'The Adolescence of Technology,' Amodei wrote: 'The thing to worry about is a level of wealth concentration that will break society. Wealthy individuals have an obligation to help solve this problem.' Each cofounder's net worth is estimated at ~$3.7B, potentially directing tens of billions to philanthropy. The pledge is not legally binding and no donations have been made yet - equity is 'set aside' pending implementation.

Google agreed to pay $68 million to settle class action claims that Google Assistant-enabled devices (Google Home, Nest Hub, Pixel phones) surreptitiously recorded users' private conversations without consent. The recordings occurred due to 'false accepts' — the device mistakenly activating and recording when no wake word was spoken. Final approval hearing is scheduled for March 19, 2026.

On January 23, 2026, ByteDance and a consortium including Oracle, Silver Lake, and the Abu Dhabi state-backed MGX finalized TikTok USDS Joint Venture LLC, reducing ByteDance's stake in TikTok's US operations to 19.9% while Oracle became the venture's security partner storing US user data on its cloud and auditing compliance. However, ByteDance retained a licensing agreement covering TikTok's recommendation algorithm -- the kind of ongoing 'operational relationship' the 2024 Protecting Americans from Foreign Adversary Controlled Applications Act explicitly required be eliminated. National security experts, including former State Department official Michael Sobolik, called the arrangement a 'unilateral surrender to Beijing' that 'allows Beijing to manipulate content and steal Americans' data, even after today's announcement.' Sen. Ed Markey stated the deal 'maintained an operational relationship between ByteDance and TikTok USDS, violating the spirit, if not the letter, of the law' and said the White House had provided 'virtually no details' on whether the algorithm is truly free of Chinese influence, calling for Congressional investigation. Even Rep. John Moolenaar, chair of the House Select Committee on China and a supporter of the underlying law, said after the deal closed that 'questions... need to be answered' about whether China retains algorithmic influence and whether user data is secure.

A January 2026 Citizen Lab report found Cellebrite equipment was used in at least seven cases to extract data from phones seized from activists and a journalist detained during pro-Palestinian protests in Jordan between late 2023 and mid-2025. None of the individuals consented to the searches. All four devices forensically analyzed showed Cellebrite product use in 2024-2025.

At Intuit's January 22, 2026 Annual Meeting of Stockholders, a proposal submitted by the conservative National Center for Public Policy Research -- requesting the board report on the financial return and legal/reputational risk of Intuit's diversity, equity and inclusion programs -- was decisively rejected by shareholders. Per Intuit's SEC 8-K vote-results filing, 228,853,804 votes were cast against the proposal versus 1,753,458 for (~99.2% against). Intuit's board had recommended stockholders vote against the proposal, calling it 'unnecessary and wasteful' and affirming that employees are one of the company's four key 'True North' stakeholders. The rejection came amid a wave of similar anti-DEI shareholder proposals and corporate DEI rollbacks across the tech and broader corporate sector in 2025-2026, making Intuit's active defense of its programs a notable outlier.

Vietnam's competition authority summoned VNG over Zalo's updated user terms, which required forced consent to broad data collection days before Vietnam's Personal Data Protection Law took effect in late December 2025. Vietnamese regulators separately fined VNG (alongside TikTok) roughly $64,700 total for user data transgressions on Zalo, and fined VNG over a game distributed with content that did not match its approved license. VNG said it cooperated with authorities and revised several policies.

On January 21, 2026, Cisco disclosed a critical code injection vulnerability (CVE-2026-20045, CVSS 8.2) affecting Unified Communications Manager, Webex Calling, and related products that was actively exploited as a zero-day before a patch was available. The vulnerability allowed attackers to send crafted HTTP requests to obtain user-level access to the underlying operating system and escalate privileges to root. Cisco's PSIRT was aware of attempted exploitation in the wild. The U.S. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog and gave federal agencies until February 11, 2026 to deploy updates. The zero-day status indicates attackers discovered the vulnerability before Cisco's security teams, representing a failure to identify and remediate critical vulnerabilities before exploitation.

Poland's consumer protection authority UOKiK filed formal greenwashing charges against Bolt (alongside Tchibo and Zara) on January 21, 2026, alleging its 'Project Zero' and 'zero-emission vehicles' marketing misleads consumers into believing rides are broadly zero-emission when the vast majority of its fleet still uses internal combustion engines and only the driving stage, not the vehicle lifecycle, is emission-free. UOKiK also challenged Bolt's '100% renewable energy' claims for offices, warehouses and charging stations, which rely largely on Energy Attribute Certificates offsetting consumption rather than direct renewable purchases, without clearly disclosing scope. Bolt faces potential fines of up to 10% of turnover per contested practice.

At the World Economic Forum in Davos on January 20, 2026, Dario Amodei lambasted the Trump administration's decision to allow Nvidia to sell H200 AI chips to China, calling it a 'major mistake' with 'incredible national security implications'.

A November 2025 internal German Ministry of Defense presentation found Helsing's HX-2 loitering munitions suffered high failure rates on takeoff and vulnerability to electronic jamming during Ukrainian frontline testing. Ukraine suspended additional orders and Germany said it would not place follow-on orders until Ukraine formally expressed renewed interest. Helsing disputed the characterization, said it was unaware of the internal presentation, rejected the reported failure rates, and said it was 'too early to draw conclusions from limited frontline testing.'

An IT sector union (NITES) flagged that Wipro had delayed onboarding of more than 250 engineering graduates who had received offer letters, in some cases for over a year, leaving them unemployed without pay or clear start dates. India's central labour ministry referred the complaint to the Karnataka state labour department for investigation. The pattern echoes similar onboarding-delay complaints against other large Indian IT services firms.

Meta laid off about 1,500 employees representing 10% of its Reality Labs division, which includes 15,000 employees and focuses on metaverse development. In 2025, CEO Mark Zuckerberg directed executives to reduce their 2026 budgets as Meta increasingly focuses on AI research.

A widespread malware campaign abused Google's Chrome Web Store for months, exposing private AI chatbot conversations and browsing data from roughly 900,000 users. The campaign involved two malicious browser extensions identified as 'ChatGPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI' and 'AI Sidebar with DeepSeek, ChatGPT, Claude.' The extensions remained available in the Chrome Web Store despite the security vulnerabilities.

42 State Attorneys General issued a letter to Microsoft (along with other large technology companies) about the rise in sycophantic and delusional outputs from generative AI software. The letter highlighted that generative AI software has been involved in at least six deaths in the United States, and other incidents of domestic violence, poisoning, and hospitalizations for psychosis.

Crunchbase confirmed it was hacked in January 2026 after the cybercriminal group ShinyHunters published samples of stolen data. The company stated they detected a cybersecurity incident where a threat actor exfiltrated certain documents from their corporate network. Investigators linked the attack to a broader ShinyHunters campaign focused on voice phishing targeting Okta single sign-on credentials, with similar techniques tied to recent breaches at SoundCloud and Betterment.

42 State Attorneys General issued a letter to Google (along with other large technology companies) about the rise in sycophantic and delusional outputs from generative AI software. The letter highlighted that generative AI software has been involved in at least six deaths in the United States, and other incidents of domestic violence, poisoning, and hospitalizations for psychosis.

42 State Attorneys General issued a letter to Meta (along with other large technology companies) about the rise in sycophantic and delusional outputs from generative AI software. The letter highlighted that generative AI software has been involved in at least six deaths in the United States, and other incidents of domestic violence, poisoning, and hospitalizations for psychosis.

The Wikimedia Foundation announced commercial partnerships through Wikimedia Enterprise with Amazon, Meta, Microsoft, Mistral AI, and Perplexity for structured API access to Wikipedia data for AI training. This formalizes relationships that previously involved unpaid scraping, creating a sustainable revenue model.