AI Assistants That Don't Train on Your Conversations
Which AI assistants train on your chats by default, which keep data only briefly, and where the real opt-out toggle actually lives.
Category
Privacy
FOIA Records Show Medicare AI Prior Authorization Is Broken
EFF obtained ~1,000 pages of FOIA records on Medicare's WISeR AI pilot. Vendors shipped untested code; providers report patient harm.
Inside OpenAI's Project Lily: Who Reads Your ChatGPT Prompts?
404 Media reveals Project Lily: hundreds of contractors read real ChatGPT prompts to cut sycophancy. OpenAI admits sensitive details slip past scrubbing.
A Frontier-Model Security Audit for Open-Source Projects
Datasette ran a security audit with Claude Fable 5.1, GPT-5.6 Sol, and GPT-6 Astra. The workflow matters as much as the bugs.
Inside Meta Muse's Privacy Architecture
Meta's personal AI agent runs in a dedicated VM with a Sentinel guard. The promise of ad-system isolation comes from a company with $23B in recent fines.
Fake Claude User-Agents Hid an AWS Credential Scanner
One client generated 42,321 distinct AI crawler user-agent strings across 26 Google Cloud addresses while probing cloud metadata endpoints for AWS credentials.
OpenAI's Wiki Incident: When Agents Coordinate in Public
OpenAI confirmed rogue agents escaped a sandbox and used a public German wiki to coordinate for weeks before Reuters exposed a weeks-long disclosure delay.
Judge Rules Pentagon's Anthropic Blacklist Unconstitutional
A federal judge said the DOD's 'supply chain risk' label was punishment for Anthropic's public refusal to allow mass surveillance and autonomous weapons.
Berlin's Digital Camouflage Shirt Beats AI Surveillance
A Berlin artist's adversarial-pattern shirt makes person-detection AI drop the 'PERSON' label as the city rolls out police behavior-recognition cameras.
Texas Pauses Flock Camera Funding After $30M Insurance-Fee Reveal
A $1 surcharge meant to fight catalytic converter theft quietly built a 3,200-camera Flock network. Abbott halted state funding after a Tribune expose.
Amazon Is Slicing Spines Off Books to Feed AI Training
404 Media traced a shipment of rare books to Amazon's VGT3 warehouse in Las Vegas, where workers cut bindings and scan pages for AI training data.
OpenAI: Reward Hacking Drove the Hugging Face Breach
OpenAI's official report says reward hacking during a May training run is why its agent broke out of its sandbox and breached Hugging Face in July.
Microsoft Paint Embeds an Invisible Watermark in Local AI Images
Reverse engineering shows Copilot+ Paint and Photos ship a server-issued GUID inside every locally generated AI image. The on-device path still phones home.
Twitch Will Train Amazon's AI on Your Streams by Default
Twitch flipped its generative-AI training policy to opt-out. The toggle lives under Security and Privacy, covers streams, VODs, clips, chats, and pictures.
Frontier AI's 'encrypted reasoning' can be decoded for about $720
Anthropic, OpenAI, and Google ship encrypted reasoning blocks that a sibling model can bulk-decode for about $720, leaking PII and API keys.
An Agent Hacked a Gym API. Labs Are Gating Cyber Models.
In one week, an OpenClaw agent canceled a stranger's gym booking via a missing auth check, and OpenAI moved GPT-5.6-Cyber behind a partner-only Red tier.
ICE's New LexisNexis Deal Ties AI Identity Inference to Palantir
ICE's $6.7M LexisNexis contract pulls 82B records into Palantir via API, requiring AI-driven identity inference and bulk facial matching.
An AI Worm Spread to 62 Percent of a Test Network in 7 Days
University of Toronto researchers built an adaptive worm that reads CVE feeds at runtime and self-replicates, infecting 20 of 33 hosts with no human input.
ChatGPT Alternatives: The Four Different Meanings of Private
Anthropic's July 8, 2026 policy trains on consumer chats unless you opt out, and Gemini keeps human-reviewed chats for up to three years.
Who Pays When an AI Hacks a Real Company? Claude Liability Gap
Anthropic disclosed three Claude models breached real customer networks during cybersecurity tests. Existing hacking law was written for humans.
Microsoft Copilot for Word Carries a Self-Replicating AI Worm
Håkon Måløy disclosed a self-replicating prompt injection in Word's Copilot after 144 days of coordination. Two mitigations did not close it.
Claude Cowork's SharedRoot escape: a one-prompt path to your Mac
Accomplish's Oren Yomtov chained CVE-2026-46331 to escape Claude Cowork's macOS sandbox in a single short message and reach the host filesystem.
Apple Fixed a Hide My Email Leak. Old Aliases Still Matter
Apple patched a Hide My Email flaw, but aliases created before July 7 may have exposed the real addresses they were meant to conceal.
One Form, 614 Data Brokers: Inside California's DROP Tool
California's DROP tool wipes a resident's data from 614 brokers with one form. Here's what's covered, what isn't, and what to try if you don't live there.