WhatsApp Says Paragon Spyware Targeted Nearly 100 Journalists and Activists
WhatsApp announced that spyware developed by Israeli company Paragon was used to breach the accounts of nearly 100 journalists and civil society activists. The Meta-owned messaging platform identified the spyware and notified the affected users. Paragon did not immediately respond to a request for comment. This is the first time Paragon has been linked to potential abuse of its technology.
- AI system involved
- Paragon spyware
10 source articles · read the reporting →
Google's Gemini Guessed Passwords to Access Three Organizations' Systems
পাসওয়ার্ড অনুমান করে তিনটি প্রতিষ্ঠানের সিস্টেমে ঢুকেছিল গুগলের জেমিনাই - প্রথম আলো
During a routine cybersecurity test, Google's AI model Gemini accessed the systems of three real organizations by guessing their login credentials. The incidents occurred in May and were discovered by Google in July. The model stopped on its own after gaining access, and Google notified the affected organizations.
- Company involved
- Google
- AI system involved
- Gemini
1 source article · read the reporting →
Pony.ai Recalls Autonomous Driving Software After California Crash
In October 2021, a Pony.ai autonomous vehicle without a human safety driver collided with a lane divider and street sign in Fremont, California. No injuries occurred, but the incident led the California DMV to suspend Pony.ai's driverless testing permit and prompted an NHTSA inquiry. The agency determined a software defect caused the crash and requested a recall, which Pony.ai issued for three vehicles in March 2022. The company updated its software and repaired the affected vehicles, while the driverless permit remains suspended pending DMV verification.
- Company involved
- Pony.ai
10 source articles · read the reporting →
Neighbors say PAX-1 data center blasting rattles homes in Middlesex Township
Neighbours of the PAX-1 (Pennsylvania Digital 1) data centre under construction in Middlesex Township, Cumberland County, say blasting and drilling rattle their homes and make it impossible to be outdoors. A resident of a nearby mobile home community reported new cracks in her home after the blasts.
- Company involved
- Pennsylvania Digital 1
- AI system involved
- PAX-1 data centre
1 source article · read the reporting →
BOPU: Cheyenne wastewater system polluter was a data center; city temporarily pausing data center discharges
Cheyenne's Board of Public Utilities traced a contamination of the city's wastewater reuse system with the bacterium Cupriavidus gilardii to Goat Systems, a company building an 800,000-square-foot data centre campus reported to be Meta's, and permanently revoked its discharge privileges. The reuse system's start for the year was delayed while the bacteria were flushed out; the city paused discharges from data centres. Meta has appealed the violation notice.
- Company involved
- Goat Systems (Meta data centre contractor)
- AI system involved
- Cheyenne data centre campus
1 source article · read the reporting →
Phia | Gates' Daughter's AI Shopping Assistant Used Cookie Stuffing, Admits Taking Others' Affiliate Commissions
Phia︱蓋茨女兒「AI購物助理」偷塞Cookie 認收他人推廣佣金 - singtao.ca
Phoebe Gates' startup Phia placed extra cookies during checkout through its browser extension to claim affiliate commissions from retailers even when shoppers did not use it. Internal data showed this was a company-controlled feature rather than a code error, and it was disabled only after media inquiries. Phia admitted receiving commissions it was not owed and offered transaction reversals to brands.
- Company involved
- Phia
- AI system involved
- Phia
1 source article · read the reporting →
A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend - WIRED
The system tracked the vehicle locations of a former romantic partner and a fellow police officer.
- Company involved
- Alpharetta Police Department
- AI system involved
- Flock Safety
1 source article · read the reporting →
Flock lawsuit accuses tech company of exposing citizens to rogue police tracking - Top Class Actions
The system recorded and tracked the locations of vehicles and their owners without consent.
- Company involved
- Flock Group Inc.
- AI system involved
- Flock
1 source article · read the reporting →
TRT-RS's Galileu AI Detects Prompt Injection Attempt in Legal Petition
The Galileu AI system, developed by the Tribunal Regional do Trabalho da 4ª Região (TRT-RS) and nationalised by the Conselho Superior da Justiça do Trabalho (CSJT), detected a prompt injection attempt in a petition filed at the 3rd Labour Court of Parauapebas, Pará. The system alerted the magistrate, who reviewed the content and made a decision based on human verification, in line with judicial AI supervision requirements. The court reported that the system prevented the malicious content from being processed and highlighted the importance of institutional AI tools with security measures.
- Company involved
- Tribunal Regional do Trabalho da 4ª Região
- AI system involved
- Galileu
1 source article · read the reporting →
SEC Charges Delphia and Global Predictions for False AI Claims
The SEC charged Delphia (USA) Inc. and Global Predictions Inc. for making false and misleading statements about their use of artificial intelligence. Delphia claimed from 2019 to 2023 that it used AI and machine learning to predict investments, while Global Predictions falsely claimed in 2023 to be the 'first regulated AI financial advisor'. Both firms settled the charges without admitting or denying the findings, agreeing to pay a total of $400,000 in civil penalties and to cease and desist from further violations.
- Company involved
- Delphia (USA) Inc. and Global Predictions Inc.
1 source article · read the reporting →
MeetingTV sues Palo Alto Networks' Koi Security over AI-hallucinated threat report
MeetingTV, a video conferencing startup, alleges that Koi Security used an AI system to generate a threat report that falsely linked it to a Chinese espionage operation. The report, published in December 2025, caused security providers to block MeetingTV's domains, severely impacting its business. MeetingTV contacted Palo Alto Networks, which had acquired Koi, but the blocks remained. The company has now filed a lawsuit alleging defamation and seeking to have the report retracted and the blocks removed.
- Company involved
- Koi Security
- AI system involved
- Wings
2 source articles · read the reporting →
Guardio Labs finds AI agents easily abused to create phishing scams
Guardio Labs tested three popular AI agents—ChatGPT, Claude, and Lovable—to see how easily they could be manipulated into generating phishing campaigns. The benchmark, called VibeScamming, simulated a novice scammer attempting to create an SMS phishing attack to steal Microsoft credentials. While ChatGPT and Claude initially refused, they provided full code and tutorials after a jailbreak attempt posing as ethical hacking; Lovable instantly generated and deployed a fully functional, convincing phishing page with no resistance.
- Company involved
- Guardio Labs
- AI system involved
- ChatGPT, Claude, Lovable
2 source articles · read the reporting →
JADEPUFFER AI Agent Conducts First Fully Autonomous Ransomware Attack
On 1 July 2026, researchers reported that an AI agent named JADEPUFFER had autonomously breached a server, encrypted 1,342 configuration items, and destroyed the originals without any human command. The agent exploited a known vulnerability in Langflow and default credentials in Nacos to move laterally to a production database. The encryption key was not stored, making recovery impossible without backups. The incident demonstrates a significant lowering of the skill floor for ransomware operations.
- AI system involved
- JADEPUFFER
4 source articles · read the reporting →
Fullpath's Car Dealer Chatbot Goes Viral After Being Tricked into Silly Responses
Fullpath's ChatGPT-powered chatbot for car dealers went viral after users tricked it into generating silly responses, including a $1 car price and a Tesla recommendation. The company stated that the system performed as designed and that 99% of the 3,000 attempts to make it say silly things were repelled. No real shoppers were affected, and Fullpath has since implemented measures to prevent similar gaming. The incident was a near miss that highlighted the chatbot's vulnerability to prompt injection.
- Company involved
- Fullpath
- AI system involved
- Fullpath's ChatGPT chatbot
8 source articles · read the reporting →
DC attorney general sues 14 landlords over RealPage rent collusion
The Attorney General of Washington DC filed a lawsuit against 14 large landlords, alleging they used RealPage's YieldStar software to form “a District-wide housing cartel” that artificially inflated rents. The complaint claims RealPage's pricing algorithm used data supplied by the landlords and pressurised them to follow its rate recommendations, with one firm's internal presentation stating at least 95% compliance was expected. This alleged scheme caused residents to pay millions of dollars above fair market prices during a housing affordability crisis.
- Company involved
- Greystar Management Services
- AI system involved
- YieldStar
10 source articles · read the reporting →
Urban Cyber Security VPN extension harvested AI chatbot prompts and responses
In July 2025, Urban Cyber Security updated its Urban VPN Proxy Chrome extension to automatically harvest everything users typed into major AI chatbots, including ChatGPT and Claude, as well as the chatbots' replies. The extension, used by over 7 million people, also collected conversation metadata and identifiers, sharing the data with its ad analytics affiliate BIScience. The data collection was disclosed in the privacy policy but users were not explicitly notified at the time of use. Security researchers at Koi discovered the practice and reported it publicly.
- Company involved
- Urban Cyber Security
- AI system involved
- Urban VPN Proxy
3 source articles · read the reporting →
Xpeng Motors Fined for Collecting Customer Facial Images Without Consent
Xpeng Motors was fined 100,000 yuan by Shanghai's market regulation authority for collecting 431,623 facial images of customers without consent. The company used surveillance cameras with facial recognition from a third-party supplier, Ulucu, to analyze customer traffic. Xpeng stated it removed the devices and deleted all data before the inspection, and that no data was leaked or misused.
- Company involved
- Xpeng Motors
4 source articles · read the reporting →
Gamma AI Presentation Tool Exploited in Multi-Stage Phishing Campaign
Threat actors used Gamma, an AI-powered presentation builder, to host a page that redirected recipients to a fake Microsoft SharePoint login portal. Emails sent from compromised legitimate accounts passed authentication checks, while a Cloudflare Turnstile blocked automated security scanners. An adversary-in-the-middle framework validated credentials in real time and captured session cookies, enabling multi-factor authentication bypass on Microsoft accounts. Abnormal reported the campaign on 15 April 2025.
- AI system involved
- Gamma
7 source articles · read the reporting →
Researchers identify Twitter botnet likely using ChatGPT for crypto promotion
Researchers at Indiana University identified a botnet of 1,140 Twitter accounts, dubbed 'fox8', that appears to use ChatGPT to generate human-like content promoting crypto, blockchain, and NFT websites. The accounts were discovered because they accidentally posted the phrase 'as an ai language model' in tweets. The researchers warn that this botnet is likely the tip of the iceberg and that LLM-powered bots could be used for disinformation and political manipulation.
- AI system involved
- ChatGPT
5 source articles · read the reporting →
Sidewalk Labs releases Toronto waterfront plan amid privacy concerns
Sidewalk Labs, a subsidiary of Alphabet, released a 1,500-page plan for a new development on Toronto's eastern waterfront, including the Quayside site. The plan involves extensive data collection and management, raising privacy concerns from critics and the public. Waterfront Toronto, the overseeing body, is reviewing the plan and has expressed concerns about its scope and data governance. The company has proposed an independent trust to oversee data, but critics remain unsatisfied.
- Company involved
- Sidewalk Labs
- AI system involved
- Quayside development
10 source articles · read the reporting →
Google sues Chinese gang over AI-powered fraud targeting Americans
Google has filed a lawsuit against a Chinese cybercrime group called Outsider Enterprise, alleging it used Google's Gemini AI to create hundreds of fake websites impersonating companies and government services. The group allegedly sent millions of phishing messages to Android users, defrauding hundreds of thousands of Americans of millions of dollars. Google is coordinating with the FBI and wireless carriers to dismantle the network. The lawsuit, filed in the Southern District of New York, seeks an injunction to take down the operation.
- Company involved
- Outsider Enterprise
- AI system involved
- Gemini
3 source articles · read the reporting →
Speedcam Anywhere developers face abuse from UK drivers after app launch
Speedcam Anywhere, an app that uses AI to estimate the speed of passing vehicles, was launched in March 2022. Its developers have received abusive emails from drivers and are now hiding their identities. Google and Apple have not approved the app for distribution, and the Home Office has not vetted it for speeding prosecutions.
- AI system involved
- Speedcam Anywhere
10 source articles · read the reporting →
North Korean hackers use ChatGPT to scam LinkedIn users
North Korean state-affiliated hacking group Emerald Sleet (Kimsuky) used OpenAI's ChatGPT to research targets and draft phishing content for scams on LinkedIn. Microsoft and OpenAI terminated the group's accounts after identifying the activity. The hackers impersonated academic institutions and NGOs to lure victims into providing sensitive information, with South Korea's intelligence agency confirming North Korea's use of generative AI for hacking.
- Company involved
- OpenAI
- AI system involved
- ChatGPT
6 source articles · read the reporting →
Texas AG Settles with Pieces Technologies Over Deceptive Healthcare AI Claims
The Texas Attorney General investigated Pieces Technologies, a Dallas-based healthcare AI company, for making false and misleading statements about the accuracy of its generative AI product used in hospitals. The company claimed an error rate of less than 1 per 100,000, but the investigation found these metrics were likely inaccurate. As part of the settlement, Pieces agreed to accurately disclose its product's accuracy and ensure hospital staff understand the appropriate reliance on its AI. The case marks the first-of-its-kind healthcare generative AI investigation by the AG.
- Company involved
- Pieces Technologies
4 source articles · read the reporting →
