• San Marcos councilors have approved new zoning laws that ban data centers
• The same zoning laws could be used by 352 cities across Texas
• But there are a few hurdles to jump through before anyone can celebrate

San Marcos may have just answered the main question surrounding data center construction in US cities - how do we prevent it?

Well, it turns out that simply defining what a data center is and then excluding their construction from zoning codes may have been the answer cities across the US have been looking for.

That is exactly what the San Marcos City Council did, voting 4-3 on June 16 to ban the construction of data centers within the city limits on the basis that they would deprive the local population of water and energy resources.

San Marcos bans data centers

The San Marcos City Council feared that new data centers would encroach on the city limits, with two new projects being proposed just outside of the city in unincorporated parts of Hays County.

Banning data centers at the county level is a hurdle multiple councilors have attempted to jump across the US with little effect — a problem Hays county councilors have encountered following the introduction of a non-legally binding data center development pause.

San Marcos may be a case to watch, as it will likely see opposition from data center development groups and legal challenges from representatives such as state Sen. Paul Bettencourt, who commented on the city council’s decision stating, “They should not use zoning to ban anything everywhere in the city, because that’s not lawful under the state of Texas guidelines. [A ban] doesn’t work here, and this will get challenged.”

There are other cities in Texas with similar levels of control over zoning — 352 to be exact — that will be following the legal challenge against this ruling closely because, if it is successful, it will set a precedent for other cities across the state to ban data centers within city limits.

The experts certainly believe that the San Marcos moratorium could pass, with Robert Paterson, a professor at the University of Texas in Austin stating, “theoretically, I think the courts could uphold it.”

But the main obstacle to both San Marcos ban and the wider Hays County pause is the 2023 Death Star law, which prevents local law from overriding state law.

Elsewhere in the US, both representatives and citizens are using whatever action they can take to oppose local data center construction projects, with around half of US data centers planned for 2026 canceled or delayed. Local councilors are losing their jobs after approving data center projects against their constituent’s wishes, and data centers will be a key issue during the upcoming midterm elections.

Smaller cities with less power to control zoning are instead making it as difficult as possible to build a data center within city limits, rather than banning them outright, in order to skirt around regulations on construction bans and moratoriums.

Via Texas Tribune

• Bipartisan bill wants big tech companies to pay for the additional energy consumption and capacity fueled by data centers and AI demand
• Congress will begin consideration of the bill, before it moves on
• Electricity prices have risen dramatically in the US, primarily because of an explosion in new data center construction projects

A bipartisan bill is currently moving through Congress that seeks to force the big tech companies behind the massive buildout of AI datacenters to pay for the energy they use.

Currently the cost of energy is calculated by a combination of factors such as how much it costs to generate and transport the power, with extra charges added for plant and infrastructure maintenance, local regulations, and additional capacity and demand charges.

That means those living in areas with data centers connected to the local grid will have to bear the cost of the sudden increase in demand and capacity, even if they are not using more energy themselves. The Ratepayer Protection Act looks to shift that burden onto the tech companies.

Ratepayer Protection Act

The name may sound familiar, and that's because the bill essentially looks to codify parts of Trump’s Ratepayer Protection Pledge — the commitment that companies such as Amazon, Google, Meta, Microsoft, OpenAI, Oracle, and xAI signed back in March this year. This pledge was only voluntary though, and lacked any real detail on exactly what signatories would be paying for.

The House of Representatives will now begin consideration of the bill, which seeks the introduction of a “large load standard” requiring tech companies to bear the cost of the energy they use, alongside upgrades to the local grids they connect to. The bipartisan bill’s primary sponsors are Reps. Gabe Evans, R-Colo., and Kathy Castor, D-Fla.

“Families and small businesses across the country shouldn’t be left to foot the bill for this new development, though the benefits of these innovations will be felt by all of society,” said House Energy and Commerce Chair Brett Guthrie, R-Ky. “The Ratepayer Protection Act is a bipartisan effort, which would ensure that the costs of grid upgrades are appropriately paid for according to demand.”

If you weren’t already aware, there has been a nationwide wave of opposition to data centers, with both local grassroots movements and nationwide opposition groups successfully delaying and cancelling data center construction projects. There have been a range of motivations behind opposition, from ecological conservation and energy prices, to the fear of AI-influenced job losses and a modern resurgence of the Luddite movement.

The Ratepayer Protection Act is therefore a response to the growing resentment experienced across the US political spectrum, and represents one of the first Congressional attempts to force big tech to pay their way for the enormous increase in energy demand the US has experienced in the past few years — primarily driven by AI demand.

Speaking on behalf of his constituents, bill sponsor Evans said, “Colorado families, farmers, and small businesses should not be forced to cover the costs of new power generation driven by these developments.”

After passing through Congress, the bill will have to be considered by the Energy and Commerce Committee, the House, and the Senate before being ratified by President Trump. Whether the bill will still have teeth in that time remains to be seen. But the bill comes at a pivotal time in the US election cycle, with midterm elections just months away and data centers being a serious consideration for any sitting representative or hopeful candidate.

• US Secret Service personnel are using personal devices while conducting official business
• Personal devices are not secured against the threats faced by Secret Service members
• But government-issued devices aren't equipped for the needs of Secret Service members either

The Department of Homeland Security inspector general has released a new report which claims the US Secret Service is refusing to use government-furnished equipment (GFE), such as smartphones, because they are not suitable for mission operations.

The report states GFE fails to “ensure real-time, continuous protection from cyberattacks by foreign adversaries or individuals” with the equipment found to contain multiple third-party apps with security vulnerabilities that could expose communications.

In order to be able to perform effectively, Secret Service members are using personal devices to communicate with law enforcement and each other during missions, but many personal devices are not secured against the threats faced during the protection of America’s VIPs.

US government struggles to secure issued phones

But using personal devices in professional operations is also highly unsecure. These devices often contain the whereabouts of Secret Service personnel and the targets they are protecting during missions at home and abroad.

Furthermore, the devices only have the consumer level of cyber protections. As they are not managed or operated by the US government, there is very little protection against commercially available spyware or malware.

In some cases, personnel used their personal devices as a hotspot for their GFE, or used their personal devices to access websites otherwise blocked on their GFE.

The report explains: “If a personal device is jailbroken, infected with malicious code, or not up to date on security software, an adversary could intercept device communication. Outdated and vulnerable apps could enable malicious actors to conduct surveillance, track locations, or record employees’ communications. Connecting to unsecured networks may also allow cybercriminals to access data or install malware.”

The main culprit behind Secret Service personnel choosing not to use GFEs was found to be the Secret Service’s Office of the Chief Information Officer (OCIO). According to the report, “GFE mobile devices lacked mission-critical capabilities because Secret Service OCIO’s process for assessing and approving requests did not always correctly identify operational needs.”

Additionally, the expected protocol for most Secret Service members was to use personal devices, so many avoided navigating the bureaucracy of requesting access to communications apps on their GFE, which in return created a blindspot for the OCIO who were not aware these apps were already being used at such a scale.

The report further found that no Secret Service GFE was equipped with Mobile Threat Defense software until August 2025, leaving them exposed to “malicious software,

cyberattacks, and other vulnerabilities.” Critical data was also retained on GFE devices after operatives returned from missions abroad, despite policy stating that devices should be wiped within 24 hours of returning to the US.

Ultimately, the report makes five key recommendations to the Secret Service in order to improve the security of its operators:

• Introduce a formal policy that ensures all GFE are issued with the required capabilities and software for each mission
• Ensure all employees complete the required cybersecurity training
• Ensure the Secret Service OCIO clearly communicates its guidance that personal devices are forbidden from use during official business
• Ensure controls are implemented to wipe devices in line with OCIO policy for returning personnel
• Subject all GFE mobile app code to an updated vulnerability testing policy

• California government will have access to Anthropic's Claude with a 50% discount
• The technology will be used to improve workflows and cybersecurity
• Governor Newsom said Claude will be used "responsibly, transparently, and in service of people"

The government of California will now be able to use Anthropic’s Claude AI with a half price discount.

A press release published by California Governor Gavin Newsom says the state's government will also have access to free workforce training, expert GenAI technical assistance and workflow input from Anthropic developers.

“This partnership is about using technology the California way: responsibly, transparently, and in service of people. AI should not replace the human work of government; it should help our workers move faster, solve problems more effectively, and deliver better results for Californians,” Gov. Newson said.

Claude comes to California

The discount for Claude also extends to local governments at the city and county level, allowing state workers with lower budgets to gain access to cutting edge tech. Gov. Newson said the technology will primarily be used for drafting, summarization, and analysis, while also “supplementing day-to-day work and improving services for Californians.”

Californian state agencies will be able to access Claude through the Statewide Information Technology Shared Services (SITeS), a new portal that centralizes AI tools for government use. The Californian government has already worked alongside Anthropic to integrate Claude into numerous tools for state workers, such as the Engaged California tool that provides Californians with more of a voice in policymaking.

Claude Security and Claude Code are also being integrated into the workflows of the California Department of Technology and the California Governor's Office of Emergency Services in order to improve cybersecurity. The California DMV will use Claude to reduce wait times and improve services, and the Department of Healthcare Services will use Claude to assist in the state’s Medicaid program.

The state is home to 33 of the top 50 private AI companies in the world, including Anthropic. “As a California company, we feel a real responsibility to our home state. We’re honored to expand our partnership with California’s agencies and to put Claude to work for the people who keep this state running,” said Kate Jensen, Anthropic’s Head of Americas.

“Building AI responsibly and in service of people has been our approach from the start, and that’s exactly what this partnership puts into practice.”

• US DOJ has seized nearly 400 domains
• The sites were being used to illegally stream World Cup games
• Users of the sites were exposed to malware, data theft, and other threats

Almost 400 domains have been seized as part of Operation Offsides - a coordinated global effort to take down sites illegally streaming the FIFA World Cup 2026.

The sites were seized by the US Justice Department's Criminal Division for violating copyright and intellectual property law.

The takedowns were coordinated by members of the International Computer Hacking and Intellectual Property (ICHIP) network.

US and friends enforce the offside rule

Many of the seized domains now display a banner explaining that the website was seized as part of Operation Offsides. “This action was taken to protect consumers and enforce intellectual property rights worldwide,” the banner states.

Back in May 2026, the FBI warned that thousands of domains were being registered ahead of the World Cup, with most set up with the intention to scam fans looking for cheap tickets, access to streaming services, and those looking for discounted merchandise. It appears that Operation Offside was focused on disrupting streaming sites in particular, rather than taking down the wider scam networks associated with these domains.

“We have seized hundreds of domains, used to illegally stream World Cup matches for profit, to disrupt the international networks that profit from the global popularity of the World Cup,” said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division.

“This operation illustrates the Department’s respect for intellectual property rights and the responsibility of the United States as a host nation to protect the FIFA World Cup from criminals. The Criminal Division will continue to disrupt and, where appropriate, seek to prosecute these sites and the subjects responsible for this criminal activity.”

In many cases, the networks of fake domains offering cheap or free access to streaming services are run by cybercriminals deliberately operating at a loss in order to attract users to their services. In return for accessing the streaming site, the domain will use the user’s local network as an exit node for the cybercriminal network, obscuring their traffic and making it appear legitimate.

Unfortunately for the user, who may think they have just found free access to every World Cup game, their network and IP address could be used to distribute malware, cybercriminal communications, and illegal content such as stolen data and exploitative materials - including child sex abuse material.

• Russian Intelligence are targeting Signal accounts of officials based in Ukraine
• They pose as Signal support services and ask users to submit their Backup Recovery Keys
• Using these keys, the hackers can hijack the users account and any other accounts created using the same mobile phone number

The FBI has warned Russian Intelligence Services are posing as commercial messaging application support services in order to steal Backup Recovery Keys belonging to targets of high value in the military and government of the US, Europe, and Ukraine.

In a joint warning alongside the CISA and the Security Service of Ukraine (SSU), the FBI outlined the new phishing campaign which seeks to access messaging accounts in order to perform intelligence gathering of secret information.

Specifically, the FBI provided sample phishing lures targeting users of the Signal messaging app. If the hackers successfully lure a victim into sharing their Backup Recovery Key, they can access the account's message history, private and group messages, and fully take over the victim's account.

Russian Intelligence pose as Signal support services

In the FBI warning, the phishing techniques are further detailed. The Russian Federal Security Service (FSB) are targeting government officials, military personnel, political figures, journalists, and key officials from the US and Europe located in Ukraine.

The attackers send emails that appear to be automated messages from Signal, asking users to turn on their message backup using their Backup Recovery Key. Victims are provided with false instructions that instead send the Backup Recovery Key to the attacker, who can then use the key to take over the victim’s account.

In order to establish urgency and trust that the message is legitimate, the attackers posed the phishing message as a protection against recent hacking attempts from “Iran and post-Soviet countries.” In another sample message, the attacker's message says that the victim’s account data “is at risk of permanent loss due to a sync issue.”

If a victim shares their unique Backup Recovery Key, it allows the attacker to hijack their current Signal account alongside any subsequent accounts made with the same phone number.

For users who may fear their Backup Recovery Key has been compromised, users are instructed to use Signal settings to create a new Backup Recovery Key. This new key will invalidate all previous Backup Recovery Keys and prevent account takeover if the previous key was leaked.

In order to avoid falling victim to phishing messages, there are several ways to stay safe:

• Support services will generally only communicate with users via an official company email address. Always carefully check communications from the legitimate email address.
• Customer support will never request that you supply your Backup Recovery Key via the application
• You will never be asked to verify or restore your account via an automated customer support message

In order to further protect your Signal account, or other accounts, against phishing, users should consider the following:

• Use a passkey wherever possible. This will use your device’s built in biometric verification methods to authenticate your login.
• Use phishing resistant multi-factor authentication where possible
• Always double check messages and emails are legitimate, and are using an official company email
• Never supply your Backup Recovery Keys unless you are actively attempting to regain access to your account via a legitimate service

• Tens of millions of credentials may have been leaked following an attack on one of Japan's largest ISPs
• The attack leveraged a vulnerability in a third-party software used by KDDI
• Five other ISPs were also affected in the attack

A data breach that has potentially exposed the email and password combinations for over 14 million customers across six internet service providers (ISPs) has been disclosed by Japanese telecoms provider KDDI Corporation.

According to the company, hackers exploited a vulnerability in a third-party software to access the database of credentials. KDDI said that it immediately blocked the hackers' access after discovering the intrusion on June 17, 2026.

“Although technical defensive measures have already been implemented for the system, there remains a possibility that customers' email addresses and passwords were obtained by unauthorized third parties as a result of the incident,” the company said in a statement.

Millions of credentials exposed

Unfortunately, the breach was not confined to just KDDI. The email services of five other ISPs were also affected by the breach:

• STNet, Inc.
• JCOM Co., Ltd.
• Chubu Telecommunications C., Inc.
• NIFTY Corporation
• BIGLOBE Inc.

KDDI is yet to finish a formal investigation into the attack, but said that the hacker may have gained access to the emails addresses and passwords for 14.22 million current and former customers. The company also said that some of the passwords were stored in an encrypted format, and so will be inaccessible for the hackers, but the company did not say how many were stored in this manner.

Since discovering the breach, KDDI has also been working alongside the affected ISPs to secure systems and put in place mitigation measures to counter the abuse of exposed account credentials.

In order to stay protected, customers have been advised to change their account passwords and implement two-factor authentication.

Breaches such as these are particularly dangerous because they expose email and password combinations. As most people will have either one or two email addresses across their accounts, it increases the likelihood that hackers can attempt to use the exposed email and password combinations to try and access other accounts created with the same email.

This is especially true if the same password (or a variant thereof) is used across multiple accounts. Hackers can use brute force techniques to try hundreds of password combinations in a very short amount of time in order to crack weak or reused passwords.

When creating or updating a password for any account, no matter how infrequently it is used, always create a strong unique password. Password managers can create and suggest strong passwords, securely store them, and automatically fill login forms to take the hassle out of remembering passwords.

Alternatively, some services offer the ability to login using a passkey, which utilizes the built-in biometric authentication mechanisms of your device such as a facial scan or fingerprint. These login methods not only remove the need to type in passwords, but also reduce the possibility of hackers accessing your account through phishing attacks.

Via BleepingComputer

More of your information than ever is uploaded to the internet these days - and while you might be putting some out there yourself, such as through social media, but much of your personal information is out in cyberspace without you even knowing.

Luckily, LifeLock Total has all the tools you need to secure your online identity, and right now LifeLock Total is just $29.17/mo (was $34.99/mo). With this privacy protection package, you can scrub your personal data from the internet, secure your social media, and remain safe in the knowledge that if your identity is stolen, you can claim up to $1 million in reimbursement for identity restoration and stolen funds.

Additionally you'll also have access to financial account monitoring across personal, investment, and 401(k) accounts, with stolen wallet protection, credit lock and credit score monitoring.

• See all LifeLock deals

Today's top LifeLock deal

LifeLock Total helps to keep your personal data off the web with automatic data broker removal scans over 30 of the most prolific data brokers, with checkups every 90 days to ensure your data is kept off the web. LifeLock also monitors the dark web for traces of your credentials, and notifies you in the event that it discovers any leaked or compromised passwords.

Your social media accounts are also protected, with LifeLock monitoring for suspicious activity and account takeovers, helping to preventing account theft and fraud. You will also be sent alerts when a registered sex offender moves into your neighborhood.

LifeLock Total almost keeps your accounts (Credit, Checking, Savings, 401K, Investment) secure with LifeLock's monitoring services, which will notify you of any suspicious activity or unauthorized transactions and withdrawals. The credit monitoring and reporting will provide annual 3 bureau credit reports, and a monthly 1 Bureau report to keep you up to date with changes to your financials.

LifeLock Total also 100% guarantees identity restoration in the event of identity theft, with a reimbursement of up to twelve months of your subscription payment if your identity isn't restored to good standing. In case you aren't fully satisfied, LifeLock also offer a 60-day money back guarantee.

• Take a look at our full guide to the best identity theft protection

Searching for secure cloud storage often comes with navigating monthly subscriptions and trying to calculate exactly how much storage you need, often with upgrades later down the line that raise your monthly costs.

But right now, pCloud is offering up to 70% off on lifetime cloud storage plans. That means you pay once, and you have lifetime access to your cloud storage without having to pay every again.

You may be wondering just how much storage you get. pCloud lifetime storage plans range from 1TB to 10TB, giving you more than enough storage for large media projects, important files, workloads, and your entire portfolio of photos and videos. This deal is only available until July 8 2026, so snap up a lifetime of storage before it goes.

Today's top pCloud lifetime deal

Full Feature Breakdown

Security

All Incogni lifetime plans come equipped with free zero-knowledge TLS/SSL encryption. That that everything you store is encrypted before it is uploaded and only you have the only decryption key, allowing you to store confidential files safe in the knowledge that your data is secure. Your data is further protected by strict Swiss privacy laws, which offer some of the strongest data protections in the world.

Platform compatibility

You pCloud drive is accessible through the pCloud Drive desktop application across MacOS, Windows, and Linux. For on-the-go mobile access, the pCloud app is available on iOS and Android with the ability to automatically upload new data to the drive, helping to free up device storage.

Sync & Backup

pCloud offers real time synchronization and backup across every mode of access. You can also set select files and folders to be automatically backed up, ensuring you have access from everywhere on any device.

Collaboration and workspace tools

Invite both pCloud and non-pCloud collaborators to view and edit files in real time using secure shared links, folder invitations, and file requests.

Stream and view photos and videos with the built-in pCloud media player, and organize your photos using the pCloud Photos feature.

Make use of pDocs to create, edit, and collaborate on documents in real time with other pCloud users.

Master your photos using pCloud's built in Photo Editor tool with one-click filters, brightness and contrast adjustments, highlight and shadow controls, plus crop, rotate, and flip.

• Take a look at our full guide to the best cloud storage