The Invisible Censor: How China's AI Chatbots Learn to Forget
Stanford and Princeton found Chinese AI models refusing sensitive questions up to 60% of the time, against under 3% for Western models
Category
Privacy
Google's Quantum-Safe HTTPS: How Merkle Trees Will Keep the Web Secure
Google and Cloudflare are deploying Merkle Tree Certificates to protect HTTPS against quantum computer attacks without breaking the internet
Apple's AI Wearables Are Coming - and So Is a Privacy Reckoning
With smart glasses, camera AirPods, and an AI pendant reportedly days from preview, Apple faces the same surveillance questions plaguing Meta
Google Assistant Dies March 31: Your Smart Home Changes
Google is killing its decade-old voice assistant by March 31, 2026. The replacement collects more data and drops features users rely on.
Ni8mare: Critical n8n Flaw Exposes 100,000 AI Workflow Servers
A CVSS 10.0 vulnerability in n8n lets attackers hijack self-hosted AI workflow instances without authentication. Patch and exposure scope.
AI Security This Week: RoguePilot, Memory Poisoning, and 2,800 Leaked API Keys
GitHub patches critical Copilot takeover flaw, Microsoft warns of AI memory manipulation attacks, and thousands of Gemini API keys are found in public code.
Deepfake Fraud Goes Industrial: $25 Million Stolen in a Single Video Call
Criminals are now fabricating entire video conferences with synthetic executives. Detection rates have fallen below coin-flip accuracy. The $40 billion deepfake fraud era has arrived.
IronCurtain: A Framework That Treats AI Agents as Hostile
Former Google and Stripe security head Niels Provos built an open source sandbox that assumes AI agents will go rogue. Here's how it works.
The Agentic AI Security Crisis: 88% of Companies Report Incidents, Only 29% Are Ready
Cisco's 2026 State of AI Security report finds enterprises deploying AI agents faster than they can secure them, as MCP flaws and prompt injection spread.
Claude Code: Opening an Untrusted Repo Could Steal Your API Keys
Opening an untrusted repo in Claude Code could run arbitrary commands and steal your Anthropic API keys - before you saw a warning.
Grok's Deepfake Reckoning: A Global Regulatory Pile-On
xAI's chatbot generated millions of sexual deepfakes, including of children. Now regulators from California to the EU are closing in.
IBM X-Force 2026: AI-Driven Attacks Surge 44%, 300,000 ChatGPT Credentials Stolen
IBM's annual threat intelligence report reveals attackers are using AI to accelerate vulnerability discovery while infostealer malware harvests hundreds of thousands of AI chatbot credentials from the dark web.
States Race to Regulate AI Chatbots for Minors After Deaths
78 chatbot bills are active in 27 states as lawmakers respond to tragedies involving Character.AI. California and New York laws are already in effect.
AI Security Week: Malware Uses Gemini, Hackers Use Claude, and NIST Scrambles to Catch Up
Android malware using Gemini for real-time evasion. A low-skill attacker using Claude and DeepSeek to compromise 600 networks. NIST launches an emergency standards initiative. Welcome to February 2026.
A Low-Skill Hacker Used AI to Breach 600 Firewalls in 5 Weeks - Amazon Watched the Whole Thing
Amazon threat researchers tracked a Russian-speaking attacker who used commercial AI tools to compensate for limited hacking skills. The result: 600+ FortiGate devices compromised across 55 countries.
Microsoft Copilot Read 'Confidential' Emails Despite DLP Labels
A bug let Microsoft 365 Copilot summarize emails marked confidential, bypassing DLP protections. Microsoft's defense misses the point.
Windows 11's New AI Feature Sends Screenshots of Your Apps to Microsoft's Cloud
Microsoft's 'Share with Copilot' taskbar feature is enabled by default and transmits visual snapshots of any open window to cloud servers for AI processing.
AI Security Roundup: 300 Million Messages Leaked, Microsoft Copilot Bug, and the Vibe-Coding Crisis
This week in AI security: Chat & Ask AI exposes 300 million messages, Microsoft patches Copilot email vulnerability, and vibe-coded apps prove trivially hackable.
Most AI-Generated Passwords Fail Basic Strength Tests
Kaspersky finds DeepSeek, Llama, and ChatGPT all produce password outputs that fail standard strength tests. Prediction capability makes LLMs bad at randomness.
Critical Flaws in Microsoft's AI SDK Let Attackers Hijack Agents
Microsoft Semantic Kernel has back-to-back critical vulnerabilities enabling remote code execution and arbitrary file writes through AI agent function calls
Critical vLLM Flaw Lets Attackers Take Over AI Servers
A CVSS 9.8 flaw in vLLM allows unauthenticated remote code execution through malicious video URLs. Patch now if you run multimodal models.
That 'Summarize with AI' Button Is Brainwashing Your Chatbot
Microsoft found 31 companies embedding hidden instructions in AI share buttons. One click poisons your assistant's memory without your knowledge.
ChainLeak: Critical Chainlit AI Framework Flaws Enable Cloud Environment Takeover
Two vulnerabilities in the popular Chainlit AI framework allow attackers to steal cloud credentials, API keys, and user data from enterprise chatbots.
Discord's Age Verification Sparks a Privacy Crisis
Discord announces mandatory facial scanning and ID uploads months after a breach exposed 70,000 government documents. Users are fleeing to Matrix and TeamSpeak.