New York Restricts AI Chats With Kids, Plus 3 Stories
New York restricts manipulative AI companion behavior with minors. Plus a DHS personnel leak, Chrome’s Gmail autofill, and ads inside AI Mode conversations.
Google Chrome
AI Tests Reached Real Systems, Plus 2 Stories
Anthropic’s filing shows how AI tests reached live systems through a misconfigured environment. Plus weak website-certificate keys and a Node.js Brotli security fix.
Your Security Tools Need Security, Plus 3 Stories
Palo Alto, Cisco, and Ahsay security tools are under active attack. Plus Florida’s social-media ban, remote-worker laptop farms, and browser updates.
Revolut Sent Data to an Impostor, Plus 4 Tech Stories
Revolut disclosed sensitive customer records after fraudulent requests came from a real government email domain. Plus BlueMoon’s Chrome/Windows exploit chain, new EU cyber-reporting deadlines, South Korea’s expanded espionage law, and NASA’s open lunar AI model.
Windows Patches Two Exploited Zero-Days, Plus 4 Stories
Microsoft’s September updates patch two actively exploited Windows privilege-escalation flaws. Plus Meta’s Muse agent, Adobe’s Magento zero-day hotfix, another exploited Chrome bug, and Google’s nuclear-backed Finland AI expansion.
Chrome Has an Exploited Zero-Day, Plus 4 Tech Stories
Google patched actively exploited Chrome CVE-2026-85046. Plus OpenAI agents on a public wiki, military ad tracking, Nvidia’s Hugging Face deal, and FTC action against payment processor Nuvei.