TechCapsules

SECURE Data Act offers ‘clear, enforceable’ privacy rules, without the big money…

Republicans in Congress have proposed the SECURE Data Act, a law that aims to establish national standards for protecting privacy rights. The legislation seeks to end the growing number of lawsuits targeting U.S. companies, often with no proof of harm. The proposed law, dubbed the "Safeguarding and Enhancing Cybersecurity and Understanding Rights of Every Data Subject Act," aims to address a "patchwork" of state privacy protection laws that have generated billions of dollars for trial lawyers. The SECURE Data Act would provide clear, enforceable rules for companies to follow, reducing uncertainty and risk for American tech companies.

💡 The SECURE Data Act could be a game-changer for American businesses, shielding them from costly lawsuits that often lack merit. By establishing national standards, the legislation would prevent trial lawyers from exploiting loopholes in state laws, allowing companies to focus on innovation rather than litigation.

RippleX Engineer Details XRPL Security Upgrade to Counter Quantum Computing Threats

Ayo Akinyele, Chief Engineer at RippleX, has outlined a security upgrade strategy to protect the XRP Ledger (XRPL) from threats posed by quantum computing and artificial intelligence. The upgrade, which has been in development since 2024-2025, involves implementing a hybrid signature method that allows the blockchain to operate normally under standard conditions but switch to a protected cryptographic stack if a quantum attack is detected. This approach balances security with operational continuity and avoids the performance overhead of running full quantum-resistant cryptography at all times.

💡 The XRPL's proactive approach to quantum readiness sets a precedent for the broader crypto ecosystem, which relies heavily on public-key cryptography. By committing to a hybrid implementation that allows for real-time switching, RippleX is treating quantum threats as an immediate engineering priority, providing clarity for businesses and developers building on the network.

FBI helps take down AI phishing ring

The FBI, in collaboration with Google and Black Lotus Labs, has disrupted a China-based phishing service known as Outsider Enterprise. This service used artificial intelligence to send fake texts and create scam websites, resulting in the theft of personal data, including credit cards and passwords. Authorities report that the service powered thousands of phishing websites, leading to millions of stolen credit cards and significant financial losses. The disruption of this service is a significant development in the fight against cybercrime. The FBI's efforts have helped to mitigate the impact of this phishing ring, protecting sensitive information and preventing further losses.

💡 Billions in losses are now prevented from escalating further. Stolen credit card numbers can no longer be used to fuel illicit activities.

Why South African SMBs Lead Global Cybersecurity Investment, Yet Face a Resilience…

South African Small and Medium-Sized Businesses are leading the world in cybersecurity investment, with 69% planning to increase spending over the next year. Despite this, they face a resilience gap, with one in two experiencing a cybersecurity incident or data breach in the past year. The IDC study surveyed over 2,200 SMBs globally, finding that South African businesses are highly alert to digital danger, with 37% describing their security posture as proactive. However, the high incident rate highlights the need to embed security tools into daily operations. This gap is a concern for business leaders, who must turn investment into organisational culture.

ClickFix Campaign Uses EtherHiding and GULoader to Infect Windows Users via Fake…

A new cyberattack campaign, dubbed ClickFix, has been targeting Windows users through fake CAPTCHA pages since April 2026. The campaign combines three techniques - EtherHiding, a blockchain-based payload method; ClickFix, a social engineering trick; and GULoader, a memory-based malware downloader - to evade standard security defenses. The attack begins on a compromised European small-business website and ends with an attempt to load GULoader onto a victim's machine. The campaign targets users who arrive at a legitimate-looking website through a Google search, with no phishing email or suspicious link involved.

💡 This campaign highlights the growing sophistication of cyber threats, where attackers blend into normal browsing to deceive both users and automated security tools. The use of legitimate-looking websites and blockchain-based payload methods makes it challenging for traditional defenses to detect the attack, underscoring the need for more advanced threat detection techniques.

Microsoft says you don’t need another email security tool; experts say, not…

Microsoft claims its Defender catches nearly all malicious email on its own, with integrated third-party tools improving detections by less than 1%. The company's quarterly benchmarking data shows Defender misses the fewest malicious emails compared to competitors and removes nearly 100% of dangerous emails that reach the inbox. However, security experts urge caution, stating that percentages obscure the true quantity and severity of emails that get through. Microsoft's data ranks itself against other security vendors, including Mimecast and Proofpoint, and introduces a new metric for threat miss rate per 1,000 employees. Experts argue that having multiple tools provides real value in defense.

💡 The notion that a single vendor can provide sufficient email security challenges the widely adopted "defense in depth" strategy. Oversimplifying email security risks can lead to complacency, making it easier for malicious emails to slip through.