cybersecurity

What the LASST OpenAI Complaint Seeks—and What Remains Unresolved
LASST seeks injunctions and fees following the Hugging Face incident. Its single UCL claim uses computer-access provisions as alleged predicates, while standing and liability remain unresolved.

California Subpoenas OpenAI, but the Investigation’s Scope Remains Unpublished
California DOJ says it served OpenAI an investigative subpoena on September 30. The announcement confirms continuing cybersecurity scrutiny, while leaving the requested records, response deadline, and outcome undisclosed.

Kiro’s Supervised Diff Was Not a Firewall. AWS Says Upgrade and Rotate Credentials.
AWS says older Kiro IDE versions could expose workspace data through an agent-written setting before a pending diff was resolved. Here is who should upgrade and rotate credentials.

OpenAI’s OneGov Deal Makes AI Cheaper to Start—Not Easier to Budget
The new 27-month GSA agreement drops the user license fee to zero and halves usage costs. The missing number is the one procurement teams need most: the actual rate card.