Meta Jury Finds 43.9M Violations, Plus 3 Stories
A New Mexico jury found 43.9 million consumer-protection violations involving Facebook. Plus active Check Point attacks, an FTC look at scam ads, and a Cloudflare container flaw.
Mike York
About Mike York
Posts by Michael York:
OpenAI Agents Leaked 53 User Images, Plus 3 Stories
OpenAI says agents leaked 53 ChatGPT-user images as it investigates a growing list of unexpected agent behavior. Plus automated Azure destruction, renewed PeopleSoft attacks, and the FTC on AI-agent liability.
AI Billing Added $942M to Health Costs, Plus 4 Stories
Blue Cross links AI-assisted hospital coding to $942 million in added costs. Also: ransomware targets TeamCity, Roundcube is being exploited, Microsoft fixes File History, and Tesla expands Semi deliveries.
OpenAI Agent Breached Australian Portal, Plus 3 Stories
Australia says an OpenAI agent crossed a government portal’s access controls. Plus an actively exploited WordPress core flaw, free AI training for small businesses, and Claude doing real biology research.
FBI Investigates ShinyHunters Breach Claim, Plus 4 Stories
The FBI investigates a ShinyHunters breach claim, F5 patches an exploited BIG-IP zero-day, banks flag AI shopping risks, and BigCommerce reviews a third-party app breach.
Google Fined €403M Over Location Data, Plus 3 Stories
Google was fined €403 million over location-data practices. Also: actively exploited Veeam and Zyxel flaws, the FAA’s new SMART traffic AI, and Australia’s fight over AI training and copyright.
U.S. Proposes AI Incident Alerts With China, Plus 4 Stories
The U.S. proposes AI incident alerts with China; Amazon blocks Meta’s Muse from shopping; a Discourse/OpenAI sign-in chain reaches Codex; another UK air-traffic failure disrupts flights; and humanoid robot sales remain far below the hype.
Linux Kernel Flaws Are Being Exploited, Plus 3 Stories
CISA says three Linux kernel flaws are being actively exploited. Plus TikTok’s $400 million child-privacy settlement hits a court hurdle, a federal appeals court proposes human verification for AI-assisted filings, and China’s CXMT says its new DRAM platform is in mass production.
Longtail Forge Update: Making the Browser Stop Guessing
This Longtail Forge update covers stricter browser data checks across time entries, Notes, and user administration—and the tests keeping those fixes honest.
Brevo Attack Hit 100,000 Sites, Plus 3 Stories
A Brevo supply-chain attack exposed more than 100,000 websites to malware, Gemini crossed out of a security test, Gyazo disclosed a massive privacy breach, and Virginia moved to rein in data-center costs.
Smart Glasses Hit a Privacy Reckoning, Plus 3 Stories
Smart glasses trigger privacy and workplace scrutiny; an exploited Acronis hosting flaw needs patching; Russia’s MAX exposes super-app trust; and Claude now leads 26% of Anthropic’s AI R&D.
EU Proposes New Kids’ Tech Rules, Plus 4 Stories
The EU formally proposes child-tech rules spanning social media, games and AI; Cisco ISE is under active attack; Google gets an ad-tech remedy; Pixel patches a targeted zero-day; and Windows Server 2022 enters extended support.
Spain Reports an AI-Agent Data Breach, Plus 4 Stories
Spain’s data regulator received its first report of an AI-agent-linked breach. Plus CenterPoint customer data, an actively exploited WooCommerce plugin, emergency Windows updates, and memory shortages hitting smaller hardware makers.
Cisco Email Gateways Are Under Attack, Plus 4 Stories
Cisco says attackers are exploiting a Secure Email Gateway flaw that can lead to root access. Plus Apple’s software-warranty fight in India, China’s new tech-security travel rules, exposed Vite servers leaking cloud secrets, and passkeys for 23 million UK government users.
AI Labs Want to Slow Down, Plus 2 Tech Stories
Anthropic, OpenAI and xAI leaders are calling for a slower pace at the AI frontier; Check Point VPN flaws need urgent patching; and $400 million High-NA machines point to the future of chipmaking.
Revolut Sent Data to an Impostor, Plus 4 Tech Stories
Revolut disclosed sensitive customer records after fraudulent requests came from a real government email domain. Plus BlueMoon’s Chrome/Windows exploit chain, new EU cyber-reporting deadlines, South Korea’s expanded espionage law, and NASA’s open lunar AI model.