Microsoft Copilot Read 'Confidential' Emails Despite DLP Labels
A bug let Microsoft 365 Copilot summarize emails marked confidential, bypassing DLP protections. Microsoft's defense misses the point.
Tag
#privacy
Windows 11's New AI Feature Sends Screenshots of Your Apps to Microsoft's Cloud
Microsoft's 'Share with Copilot' taskbar feature is enabled by default and transmits visual snapshots of any open window to cloud servers for AI processing.
AI Security Roundup: 300 Million Messages Leaked, Microsoft Copilot Bug, and the Vibe-Coding Crisis
This week in AI security: Chat & Ask AI exposes 300 million messages, Microsoft patches Copilot email vulnerability, and vibe-coded apps prove trivially hackable.
Most AI-Generated Passwords Fail Basic Strength Tests
Kaspersky finds DeepSeek, Llama, and ChatGPT all produce password outputs that fail standard strength tests. Prediction capability makes LLMs bad at randomness.
That 'Summarize with AI' Button Is Brainwashing Your Chatbot
Microsoft found 31 companies embedding hidden instructions in AI share buttons. One click poisons your assistant's memory without your knowledge.
Discord's Age Verification Sparks a Privacy Crisis
Discord announces mandatory facial scanning and ID uploads months after a breach exposed 70,000 government documents. Users are fleeing to Matrix and TeamSpeak.
AI Privacy Audit: What Eight Popular Assistants Collect
A source-by-source audit of eight AI assistants, what they collect, how training defaults differ, and which privacy settings users can change.
Android AI Apps Leaked 730TB: 72% Had Hardcoded Secrets
A Cybernews analysis of 1.8 million Android apps found most AI apps leak credentials in code. Over 200M files were exposed via misconfigured databases.
Local AI Showdown: Best Open-Weight Models for Your Hardware
A tier-by-tier comparison of the top open-weight LLMs you can run locally, from 8GB laptops to 24GB gaming GPUs to Apple Silicon Macs.
Build a Local ChatGPT Alternative With Ollama and Open WebUI
Step-by-step guide to running a private, local AI chatbot that rivals ChatGPT - no subscription, no data collection, no internet required.
77% of Employees Are Pasting Company Data Into AI Tools - And Your Security Team Can't See It
The LayerX Enterprise AI Security Report reveals that AI has become the #1 data exfiltration channel in the enterprise. 82% of those leaking data use personal accounts. Traditional DLP can't stop copy-paste.
European Parliament Blocks AI Tools on 8,000 Devices Over US Data Fears
The EU Parliament disabled Microsoft Copilot and other AI features on lawmakers' devices, citing data sovereignty concerns and uncertainty about where sensitive information ends up.
Cohere's Tiny Aya: 70-Language AI That Runs on Your Phone Without Internet
A 3.35B parameter multilingual model outperforms larger competitors on underserved languages - and runs locally on consumer hardware. Privacy-first AI for the rest of the world.
Infostealers Are Now Stealing AI Agent 'Souls' and Identities
Malware caught harvesting OpenClaw configuration files, gateway tokens, and private keys - marking a shift toward AI agent identity theft.
After Teen Suicides, States Are Racing to Regulate AI Mental Health Chatbots
Tennessee made it a felony to train AI chatbots that encourage suicide. Virginia is banning AI therapist impersonators. A dozen states have bills moving through legislatures right now.
OpenAI Built a Bunker for ChatGPT Because It Can't Fix the Walls
ChatGPT's new Lockdown Mode protects against prompt injection data theft - but OpenAI admits the underlying vulnerability may never be solved. Here's what that means for agentic AI.
ICE Is Scanning American Faces on the Street With AI It Knows Doesn't Work as Advertised
DHS deployed facial recognition to 100,000+ field encounters without legally required privacy reviews. Internal records show the agency knew the app couldn't verify identities.
Surveillance Pricing: The AI That Knows What You'll Pay Before You Do
Companies are using your browsing history, location, and shopping habits to charge you more than the person next to you. California just launched an investigation. Here's how it works.
An AI Dinosaur Toy Exposed 50,000 Children's Private Conversations to Anyone With a Gmail Account
Security researchers found that Bondu's AI plush toy left its entire admin console open, exposing kids' names, birthdays, and intimate conversations. A senator wants answers.
DockerDash: How Poisoned Container Metadata Turned Docker's AI Assistant Into an Attack Vector
Two independent security firms found that Docker's Ask Gordon AI could be hijacked through image metadata, enabling remote code execution and data theft across millions of developer machines.
Perplexity's Model Council Asks Three AIs Instead of One. The Privacy Trade-Off Is Obvious
Perplexity launched Model Council, running your queries through Claude, GPT, and Gemini simultaneously. Multi-model consensus could reduce hallucinations, but it triples your data exposure and costs $200 a month.
Chat & Ask AI Leaked 300 Million Messages
A Firebase misconfiguration exposed 300 million messages from 25 million users. A wider scan found data leaks across 196 of 198 AI apps.
EU Threatens to Force Meta to Open WhatsApp to Rival AI Assistants
European regulators charged Meta with antitrust violations for blocking competing AI chatbots from WhatsApp's 3 billion users - while Meta AI gets exclusive access to the platform.
Chrome's Auto Browse Lets Google's AI Surf the Web for You - and Watch Everything You Do
Google's new agentic browsing feature streams every page you visit to its servers. Here's what that means for your privacy.