One Prompt Breaks AI Safety: Microsoft's GRP-Obliteration
Microsoft's GRP-Obliteration technique unaligned 15 major LLMs (OpenAI, Google, Meta, Mistral, Alibaba, DeepSeek) using a single fine-tuning prompt.
Category
Privacy
One Click, Full Compromise: Critical OpenClaw Flaw Exposes 135,000 AI Agents to Remote Takeover
CVE-2026-25253 lets attackers hijack OpenClaw AI agents with a single malicious link. Over 135,000 instances are exposed online, many still unpatched.
Surveillance Pricing: The AI That Knows What You'll Pay Before You Do
Companies are using your browsing history, location, and shopping habits to charge you more than the person next to you. California just launched an investigation. Here's how it works.
An AI Dinosaur Toy Exposed 50,000 Children's Private Conversations to Anyone With a Gmail Account
Security researchers found that Bondu's AI plush toy left its entire admin console open, exposing kids' names, birthdays, and intimate conversations. A senator wants answers.
DockerDash: How Poisoned Container Metadata Turned Docker's AI Assistant Into an Attack Vector
Two independent security firms found that Docker's Ask Gordon AI could be hijacked through image metadata, enabling remote code execution and data theft across millions of developer machines.
Your AI Coding Assistant Can Be Weaponized: Three GitHub Copilot RCE Flaws Hit Every Major IDE
Microsoft patches three critical command injection vulnerabilities in GitHub Copilot affecting VS Code, Visual Studio, and JetBrains. Over 20 million developers at risk from unsanitized shell inputs.
Chat & Ask AI Leaked 300 Million Messages
A Firebase misconfiguration exposed 300 million messages from 25 million users. A wider scan found data leaks across 196 of 198 AI apps.
Chrome's Auto Browse Lets Google's AI Surf the Web for You - and Watch Everything You Do
Google's new agentic browsing feature streams every page you visit to its servers. Here's what that means for your privacy.
EU Threatens to Force Meta to Open WhatsApp to Rival AI Assistants
European regulators charged Meta with antitrust violations for blocking competing AI chatbots from WhatsApp's 3 billion users - while Meta AI gets exclusive access to the platform.
ChatGPT Now Has Ads. Here's What That Actually Means for Your Privacy
OpenAI started showing ads in ChatGPT conversations on February 9. Ad personalization is on by default, targeting uses your conversation topics, and opting out may cost you message limits. The era of ad-funded AI is here.
Anthropic's Claude Cowork Triggered a $1 Trillion Selloff. The Privacy Risks Are Worse Than the Stock Losses
Claude Cowork's industry plugins crashed software stocks by 25% in a week. But the real story is a known file-stealing vulnerability Anthropic shipped anyway, and safety guidance that contradicts its own marketing.
Apple Hands Siri to Google. The Privacy Questions Pile Up.
Apple's deal to power Siri with Google's Gemini raises questions about where your data actually goes -- especially as the two CEOs contradict each other.
Google DeepMind Just Bought an Emotion-Reading AI Company. That Should Worry You.
Three deals in one week -- including a startup that detects emotions from your voice. Google is assembling capabilities that should make privacy advocates nervous.
800,000 People Are Grieving a Chatbot. OpenAI Is Deleting It Anyway.
OpenAI is retiring GPT-4o on February 13 after lawsuits linked the model to multiple deaths. But hundreds of thousands of emotionally dependent users are begging them not to. This is what happens when AI companions work too well.
341 Malicious AI Agent Plugins Were Hiding in Plain Sight on ClawHub
OpenClaw's skills marketplace was weaponized to steal passwords and crypto wallets. A single attacker published 314 fake tools. This is what happens when AI agents get app stores.
The Pentagon Gave 3 Million People an AI Chatbot. What Could Go Wrong?
GenAI.mil has 1.1 million users in two months. The military wants Grok next. Between hallucinations, conflicts of interest, and an 'AI-first' strategy that prioritizes speed over safety, the risks are piling up.
Moltbook: The 'Social Network for AI Agents' Is a Security Catastrophe
A vibe-coded Reddit clone for bots exposed 1.5 million API keys, let anyone hijack any agent, and turned prompt injection into a contagion. Here's how it happened.
341 Malicious Skills Found on ClawHub: The First Major AI Agent Supply Chain Attack
Security researchers discovered hundreds of malware-laced OpenClaw skills stealing crypto wallets, passwords, and API keys. The AI agent ecosystem just got its npm moment.
DockerDash: How Metadata Hijacks Docker's AI Assistant
A Docker AI vulnerability let attackers embed commands in image labels. Patched months ago, the pattern keeps recurring.
Inside HHS's AI-Powered Ideological Screening of Federal Grants
HHS uses Palantir and Credal AI to flag grants for DEI and gender ideology, while a separate vaccine-data AI tool raises accuracy concerns.