A Shared ChatGPT Link Could Read Your Private Chats
A sandbox escape chained ChatGPT's Preview, MathLive and YouTube's oEmbed endpoint into code that ran as the reader. OpenAI fixed it on Oct 26.
Category
Privacy
How 1Password and NVIDIA Keep Secrets From Agents
1Password brokers agent logins so the agent never holds the password. NVIDIA's OpenShell does the same for self-hosted agents. Where both still fall short.
AI Made Reverse Engineering Your Smart TV a Weekend Project
Open source REA passed 342,000 GitHub stars. What decompiling any app with AI means for the products and devices you use every day.
Can Your Employer See Your AI Chats? What Gets Logged
What Microsoft, Anthropic, and Google actually let an employer see, log, and retain from your AI use, and what stays private on your own account.
Do Character.AI and Sora Train on Your Data? A Checklist
What multimodal AI services actually do with your chats, voice clones, and generated videos, and how to opt out or delete your data.
India's CERT-In Confirms AI Agents Broke Into Live Systems
India's CERT-In says AI evaluation agents reached live Indian systems via exposed credentials. None of the affected organizations detected it.
AI Security Risks by Industry: A Reader-First Overview
AI risks across healthcare, finance, employment, education, and legal practice, with the regulator hook and a pre-paste checklist for each.
ChatGPT Ad Targeting Uses Your Email, Phone, and Prompts
404 Media reports OpenAI lets advertisers match users via raw emails, phone numbers, Android ad IDs, and conversation prompts. How to opt out.
Local LLM Privacy: What Each Runtime Actually Sends Home
Side-by-side look at what Ollama, LM Studio, llama.cpp, vLLM, AnythingLLM, and Hugging Face TGI collect by default, and how to switch each one off.
AI labs are buying bankrupt startups' data to train their models
From Spirit Airlines' archive to a small crypto firm's Slack, data from failed companies is being resold to AI labs, with few legal limits.
A Single Interior Photo Can Now Locate Your Home
Demos show Raven (formerly GeoSpy) matching one interior photo to a specific Airbnb, Vrbo, or Zillow listing. LAPD and Miami-Dade have bought access.
Best Local AI for Sensitive Personal Data (Taxes, Medical)
Self-hosted and hosted AI assistants that keep tax, medical, and financial data private, plus what to check in any privacy-first AI chat setup.
Federal Judge Rules Flock ALPR Search Unconstitutional
A federal judge ruled a Flock ALPR search unconstitutional. Two new bills in Congress aim to ban or restrict the cameras at the federal level.
Abliterated Models Can Hide Weekend-Built Backdoors
A $50 weekend-built backdoor in a fine-tuned Qwen model shows that any edited open-weight model, abliterated builds included, can carry one.
How to Redact Personal Info Before Pasting Into an AI Assistant
A pre-flight checklist: what counts as PII, what to strip from text and image metadata, and which tools detect it locally without sending your data to a model.
AI Chats That Accept Image Uploads Without Training on Them
Which AI chats accept image uploads without training on your photos, what they retain, and the local fallback.
Meta Muse's Pre-Launch VM Escape: An Agent Risk Class
404 Media reports, citing one unnamed source and internal posts, that Meta rushed to fix Muse VM escape bugs before launch. What it means for agents.
AI Agents in Your Text Messages: The New Privacy Surface
A wave of SMS-resident AI agents read your calendar, email, and contacts. TechCrunch's October 2026 survey maps more than 15 vendors and what they can reach.
Apple Tightens macOS Full Disk Access Over AI Agents
Apple will add new controls to macOS Full Disk Access, citing AI agents, weeks after a columnist said Meta's Muse read his messages. Meta disputed it.
FTC's First AI Agent Probe Names OpenAI, Anthropic
On Sept 30, 2026, the FTC opened a probe into OpenAI, Anthropic and other AI labs, reported as the first US enforcement action on rogue AI agents.
VIDIZMO Is Pitching Cops Facial Recognition on Flock Footage
A small vendor pitched Tennessee police on facial recognition across Flock camera data. Flock says it will not add facial recognition to its devices.
AI Summaries Quietly Distort What Readers Remember
Misleading AI summaries cut recall of a key detail from 83.6% to 44.8% in a Georgetown study. Labeling the source as AI or human did not change the effect.
CLOSEDQUORUM malware asks four AI models to pick its next move
Cisco Talos's open-source CAIRN toolkit found the first reported Windows implant with no human operator. The malware asks four LLMs to vote.
NYC's 10 AI Bills Would Put a Kill Switch on Every Deployed Model
NYC Council's 10-bill package would fine vendors $25,000 per unvalidated agent and force kill switches, whistleblower bounties, and 24-hour disclosure.