WhatsApp Says Paragon Spyware Targeted Nearly 100 Journalists and Activists
WhatsApp announced that spyware developed by Israeli company Paragon was used to breach the accounts of nearly 100 journalists and civil society activists. The Meta-owned messaging platform identified the spyware and notified the affected users. Paragon did not immediately respond to a request for comment. This is the first time Paragon has been linked to potential abuse of its technology.
- AI system involved
- Paragon spyware
10 source articles · read the reporting →
4 Savannah officers arrested over Flock Safety misuse. What does oversight look like in Georgia? - CBS News
Automated license plate readers captured and retained data on drivers' locations.
- Company involved
- Flock Safety
- AI system involved
- Flock Safety
1 source article · read the reporting →
EPA investigating noise complaints at Dublin data centre
Ireland's Environmental Protection Agency opened an investigation after residents complained of a persistent humming, mostly at night, from the new Echelon DUB10 data centre in Clondalkin, west Dublin, from late July 2026. Residents up to 2 km away report lost sleep, and one living 500 metres away logged start-up noise every few minutes after midnight; others filmed thick black smoke from generator chimneys. The operator says it has applied mitigation and is investigating.
- Company involved
- Echelon Data Centres
- AI system involved
- DUB10 data centre
2 source articles · read the reporting →
Huq collected GPS data from apps even after users opted out
Huq, a location data vendor, obtained GPS coordinates from Android apps even when users explicitly opted out of data sharing within the app settings. Researchers and Motherboard found that apps like Network Signal Info and QR & Barcode Scanner transmitted location data to Huq despite settings stating no data would be shared. Huq said it is investigating and will work with app publishers to fix the issue. The data collection raises concerns about consent and compliance with privacy regulations like GDPR and CCPA.
- Company involved
- Huq
9 source articles · read the reporting →
Safe City Malta board renewed despite planned shutdown of surveillance programme
The Maltese government has appointed a new board to run Safe City Malta, the Huawei-developed facial-recognition surveillance project, despite saying in January that the company would be wound down. The board, including Omar Debono, Joseph Cauchi and Nadine Mizzi, was appointed for another year until June 2024. The government had earlier dropped the facial-recognition element over concerns that it would breach Maltese and EU law, and the article reports that nothing has been delivered.
- Company involved
- Safe City Malta
- AI system involved
- Safe City Malta
10 source articles · read the reporting →
DPRK-Linked Fake AI Job Platform Targets U.S. Tech Workers with Malware
Validin researchers report that a DPRK-linked operation known as Contagious Interview is running a fake AI-powered job platform called Lenvny. The site mimics legitimate recruitment software and advertises fabricated roles at companies such as Anthropic and Yuga Labs to lure software developers, AI researchers and crypto professionals. Applicants who reach the video introduction step are prompted to 'fix' their webcam, which delivers ClickFix malware to their computer, compromising their system and personal data. The campaign is ongoing and is considered highly convincing.
- Company involved
- DPRK-linked threat actors (Contagious Interview campaign)
- AI system involved
- Lenvny (fake AI-powered interview tool)
10 source articles · read the reporting →
Unwanted Witness warns of state surveillance in Uganda
Unwanted Witness has raised concerns about the Ugandan government's use of surveillance technology, including facial recognition and location monitoring, to suppress political dissent. The organisation alleges that CCTV footage was used to monitor opposition rallies and protests ahead of the 2021 elections. It also highlights the use of cybercrime laws to silence free speech, citing the imprisonment of activist Dr Stella Nyanzi.
- Company involved
- Uganda Police Force
- AI system involved
- CCTV Camera command centre
3 source articles · read the reporting →
Cadillac Fairview malls use facial recognition without consent
At least two Calgary malls owned by Cadillac Fairview, Chinook Centre and Market Mall, deployed facial recognition software in their directories to estimate shoppers' ages and genders without notifying them or obtaining consent. The software, provided by MappedIn, counts users and predicts demographics but does not store images, which the company claims makes consent unnecessary. Privacy advocates expressed concern that the data could be combined with other information to profile individuals, and noted that under Alberta's PIPA, notification is required for collection of personal information. The malls did not offer an opt-out, and the practice was ongoing as of July 2018.
- Company involved
- Cadillac Fairview
- AI system involved
- MappedIn
1 source article · read the reporting →
Henan Public Security Department Awards Mass Surveillance Project Targeting Journalists and Uyghurs
In 2021, the Henan Public Security Department awarded a contract to Neusoft for a surveillance system using Huawei cloud software. The system is designed to track and tag foreign journalists, foreign students, migrant women, and Uyghurs, with journalists labelled for potential punishment. IPVM and Reuters reported on the project, after which the tender was removed from public view. Huawei denied knowledge of the project, while Neusoft and PRC officials did not respond.
- Company involved
- Henan Public Security Department
3 source articles · read the reporting →
Xpeng Motors Fined for Collecting Customer Facial Images Without Consent
Xpeng Motors was fined 100,000 yuan by Shanghai's market regulation authority for collecting 431,623 facial images of customers without consent. The company used surveillance cameras with facial recognition from a third-party supplier, Ulucu, to analyze customer traffic. Xpeng stated it removed the devices and deleted all data before the inspection, and that no data was leaked or misused.
- Company involved
- Xpeng Motors
4 source articles · read the reporting →
Hyderabad Police uses facial recognition for mass surveillance without legal safeguards
Amnesty International reports that Hyderabad in Telangana, India, is becoming a total surveillance city with extensive facial recognition technology. The police have been using tablets to stop, search and photograph civilians without charge, and a new Command and Control Centre will connect CCTV cameras for real-time facial recognition. The technology threatens human rights including privacy and freedom of expression, and there is no legislation to protect citizens. Amnesty International is calling for a ban on facial recognition for mass surveillance.
- Company involved
- Hyderabad Police
10 source articles · read the reporting →
Gamma AI Presentation Tool Exploited in Multi-Stage Phishing Campaign
Threat actors used Gamma, an AI-powered presentation builder, to host a page that redirected recipients to a fake Microsoft SharePoint login portal. Emails sent from compromised legitimate accounts passed authentication checks, while a Cloudflare Turnstile blocked automated security scanners. An adversary-in-the-middle framework validated credentials in real time and captured session cookies, enabling multi-factor authentication bypass on Microsoft accounts. Abnormal reported the campaign on 15 April 2025.
- AI system involved
- Gamma
7 source articles · read the reporting →
Suresnes allows startup XXII to use CCTV for experimental surveillance algorithms
The city of Suresnes has allowed startup XXII to use its public CCTV cameras for 18 months to develop algorithms for detecting suspicious behavior. The algorithms are experimental and may have high error rates. Residents were not informed or consulted. The startup will own the data and can use the city's surveillance center as a showroom for clients.
- Company involved
- Mairie de Suresnes
- AI system involved
- XXIISmartCity
10 source articles · read the reporting →
Google Photos AI panorama creates giant head in ski photo
Google Photos' AI suggested a panorama edit for Alex Harker's ski holiday photos. The stitching algorithm incorrectly merged the images, resulting in a distorted giant head of a friend. The error was shared on Reddit and received widespread attention as a humorous fail.
- Company involved
- Google
- AI system involved
- Google Photos
5 source articles · read the reporting →
Sidewalk Labs releases Toronto waterfront plan amid privacy concerns
Sidewalk Labs, a subsidiary of Alphabet, released a 1,500-page plan for a new development on Toronto's eastern waterfront, including the Quayside site. The plan involves extensive data collection and management, raising privacy concerns from critics and the public. Waterfront Toronto, the overseeing body, is reviewing the plan and has expressed concerns about its scope and data governance. The company has proposed an independent trust to oversee data, but critics remain unsatisfied.
- Company involved
- Sidewalk Labs
- AI system involved
- Quayside development
10 source articles · read the reporting →
Outback Steakhouse franchise tests Presto Vision to monitor staff and guests
Evergreen Restaurant Group, a franchisee of Outback Steakhouse, has begun testing Presto Vision, a computer vision system that analyses surveillance camera footage to track employee performance and guest behaviour. The system compiles metrics on service, wait times, and customer turnover, which managers receive by email. Employees say they were not informed about the technology, and researchers have raised concerns about workplace stress, job losses, and data sharing with parent companies.
- Company involved
- Evergreen Restaurant Group
- AI system involved
- Presto Vision
8 source articles · read the reporting →
Italy terminates contracts with Paragon spyware after surveillance scandal
Italy has terminated its contracts with Israeli spyware company Paragon after revelations that the spyware was used against government critics, including journalists and migrant rescue workers. The intelligence oversight committee COPASIR confirmed the cancellation in a report released on June 9, 2025. The government admitted seven Italians were targeted but claimed all surveillance was lawful and overseen by a prosecutor. Opposition parties are demanding a full investigation.
- Company involved
- Italian government
- AI system involved
- Paragon spyware
9 source articles · read the reporting →
King's Cross developer scraps facial recognition after public outcry
The developer of the King's Cross site in London admitted it had used facial recognition software in two cameras on a busy pedestrian street between May 2016 and March 2018 without public consent. Following a backlash and questions from the Information Commissioner's Office, the developer announced it would not deploy the technology in the future and had abandoned plans for wider use. The system was used to help police detect crime, but critics highlighted the lack of transparency and privacy concerns.
- Company involved
- King's Cross development (Argent-led consortium)
10 source articles · read the reporting →
Barclays pilot of Sapience monitoring software causes employee stress
Barclays introduced a pilot of employee monitoring software from Sapience in its product control department at Canary Wharf. The system monitors computer activity and admonishes staff if they are not deemed active enough, recording breaks as "unaccounted activity". Employees reported significant stress and worry about taking breaks. Barclays acknowledged the pilot and said it would listen to feedback.
- Company involved
- Barclays
- AI system involved
- Sapience employee monitoring software
10 source articles · read the reporting →
India mandates Aarogya Setu app for workers despite privacy concerns
The Indian government has made its Aarogya Setu COVID-19 contact tracing app mandatory for gig workers and government employees, despite widespread privacy and algorithmic accountability concerns. The app lacks transparency and data protection safeguards, and could misidentify individuals as at risk, leading to forced isolation and loss of income. A coalition of 37 organisations and 75 individuals sent a joint representation to the Prime Minister's Office urging that the app not be made mandatory and calling for financial relief and healthcare for workers.
- Company involved
- Government of India
- AI system involved
- Aarogya Setu
10 source articles · read the reporting →
OAIC finds 7-Eleven breached privacy with facial recognition surveys
The Australian Information Commissioner found that 7-Eleven interfered with customers' privacy by collecting facial images and creating faceprints through in-store surveys without adequate notice or consent. The system was used to exclude non-genuine responses and profile demographics. The OAIC ordered 7-Eleven to destroy the collected data and cease the practice.
- Company involved
- 7-Eleven
9 source articles · read the reporting →
UK councils use Covid OneView AI to harvest personal data for risk scoring
UK local authorities are using a system called Covid OneView, developed by data analytics firm Xantura, to harvest millions of personal details from council records. The system uses predictive analytics and AI to assign risk scores to households and individuals, aiming to identify those vulnerable to Covid or likely to break lockdown rules. Privacy campaigners and MPs have criticised the lack of transparency and the extent of data collection, which includes sensitive information such as debt levels, living arrangements, and even notes on unfaithful sex. Xantura and Barking and Dagenham Council have defended the system as compliant with data protection rules and focused on providing support.
- Company involved
- UK local authorities
- AI system involved
- Covid OneView
6 source articles · read the reporting →
Clearview AI tested facial recognition surveillance cameras with UFT and Rudin
Clearview AI, the facial recognition company that scraped billions of photos from social media, developed a surveillance camera system under the name Insight Camera. The system was tested by the United Federation of Teachers and Rudin Management in New York City. The UFT used it to identify individuals who had made threats and prevent them from entering its offices. Clearview did not respond to requests for comment.
- Company involved
- Clearview AI
- AI system involved
- Insight Camera
9 source articles · read the reporting →
Teleperformance plans AI webcam surveillance for home-working staff
Teleperformance, a global call centre company, told some staff it would install AI-powered webcams to monitor home-working infractions such as eating, phone use, or leaving desks. The system would randomly scan for breaches and send alerts to managers. After the Guardian inquired, the company said the remote scans would not be used in the UK, but the plan raised concerns from unions and MPs about invasive surveillance.
- Company involved
- Teleperformance
10 source articles · read the reporting →
