Weekly Security Update: Face Recognition at Disneyland and Key Cybersecurity Incidents

Sat, 02 May 2026 23:15:00 +0200

This week in security news, Disneyland has introduced optional face recognition technology for visitors at its California parks. While Disney claims participation is voluntary, images may still be captured for those entering other lanes. The system converts facial images into numerical values, which are deleted after 30 days unless needed for legal or fraud-prevention purposes. The NSA has tested Anthropic's Mythos AI tool to identify software vulnerabilities, particularly in Microsoft products, despite a pending Defense Department ban on the company. In cybersecurity enforcement, a 19-year-old Finnish national, Peter Stokes, was arrested for alleged involvement with the Scattered Spider ransomware group, known for high-profile attacks on companies like MGM Resorts and Caesars Entertainment. Separately, a Medicare database exposed healthcare providers’ Social Security numbers for several weeks, highlighting risks in public-facing health data. OpenAI has also rolled out an advanced secu