The AI, Privacy, and Security Weekly Update

Cybersecurity is entering an “invisibility crisis,” where threats are no longer loud, external attacks but subtle abuses of normal system behavior. Techniques like SockStress exploit TCP assumptions to drain resources, residential proxy networks turn everyday users into unwitting infrastructure, and fake VPNs weaponize trust to exfiltrate data. Even ransomware response processes are being hijacked...

Episode 287. On the day before the tax deadline in the US, we’ve got the most taxing update yet, full of unexpected deductions: OpenAI has unveiled bold policy recommendations to cushion the societal impact of advanced AI, including robot taxes, a public wealth fund, and trials of a four-day workweek.  Add in cake for all, and we’d swear Marie Antoinette was running the company. As AI assumes more...

First up, AI. You’d think if you clean your training data, you control what the model learns. Nope. Researchers just showed that models can pass hidden traits to each other through data that looks completely harmless. Like numbers. No obvious bias, no keywords, nothing. And the new model still picks up the same behavior. Even after you scrub it. Think of it like this. The data looks clean, but the...

Episode 286  And have we got an update for you.  Focus on this: Researchers have discovered that AI models can be secretly shaped by their training data even after every suspicious signal has been scrubbed out, which raises an uncomfortable question: do we actually know what we've built? It turns out the most comprehensive profile LinkedIn has on you isn't the one you wrote yourself. Samsu...

The Deep Dive for Episode 285.5 explores how patience has become a defining weapon in modern AI, privacy, and security threats. State-backed actors like Red Menshen are quietly compromising telecom infrastructure with stealthy kernel-level implants, turning networks into long-term surveillance platforms while remaining almost invisible. Social engineering is evolving too: campaigns like ClickFix p...

Episode 285.  This week, we uncover some long-term offensive strategies that show the virtue of patience can have a negative impact on the victims. A China-aligned threat group is quietly weaponizing telecom infrastructure with kernel-level backdoors, turning carriers into long-term strategic listening posts. A low-tech but highly effective social engineering campaign is turning everyday users int...

The technology landscape has shifted so profoundly that “IT risk” no longer captures current threats. This publication is now the AI, Privacy and Security Weekly Update, reflecting the reality that AI drives both innovation and adversary tactics. Episode 284 (week ending March 24, 2026) covers a surge of AI-driven developments, from autonomous malware to expanding federal data systems, marking the...

 Episode 284. Yes, that's it. So much of what we cover is now AI-based that we're updating the Update to reflect that. From today, the IT Privacy and Security Weekly Update will be formally renamed the AI, Privacy, and Security Weekly Update. In this week’s update: The FBI has officially confirmed it is once again purchasing commercial location data to track American citizens, bypassing tr...

For this Deep dive we ask a high-stakes question about whether the biggest cyber threat of the AI era will come from outside attackers—or from the very AI systems organizations and individuals choose to adopt. It frames AI agents and tools as a new kind of “insider,” given trusted access to data, systems, and networks, but with behaviors that may be opaque, vulnerable to manipulation, or outright...

Episode 283  What if the next cyberattack doesn’t break into your company… but gets hired by it? What if the AI tools everyone is rushing to adopt are also the biggest security risk we’ve ever invited in? What if your home internet, the one you trust every day, is secretly working for someone else? And what happens when governments, tech giants, and criminals all collide around the same powerful n...

This week’s deep dive explores a powerful theme shaping the modern threat landscape: invisible signals. From the devices we wear and drive to the AI systems we increasingly rely on, our technology is constantly emitting data — sometimes to protect us, sometimes to expose us. We begin with a new Android app called Nearby Glasses , designed to alert users when smart glasses like Meta’s Ray-Bans are...

Ep 282  This week technology gets personal - whether you like it or not. In this update: - A new app that tells you if someone nearby is wearing smart glasses. - Your car’s tire pressure sensors silently broadcasting your movements. - AI that can unmask anonymous social media accounts. - A full “Truman Show” investment scam powered by artificial intelligence. - AI assistants quietly reshaping the...

Introduction Welcome back to: At war. The Deep Dive: With the IT Privacy and Security Weekly Update for March 3rd. 2026. episode 281. The podcast that makes sense of the week's most important technology and cybersecurity stories, without assuming you have a computer science degree. This week we have eight stories spanning AI gone wrong, AI used in warfare, a historic security milestone from Ap...

episode 281.  This week's update that makes sense of the week's most important technology and cybersecurity stories, without assuming you have a computer science degree. This week we have eight stories spanning AI gone wrong, AI used in warfare, a historic security milestone from Apple, and a new kind of AI agent that's making seasoned security professionals nervous. Let's get into...

These sources collectively examine the  evolving landscape of digital threats  and the vulnerabilities inherent in modern technology. They detail sophisticated  cyber-as-a-service schemes  like Starkiller, which bypasses traditional security, alongside physical risks such as  directed-energy research  and privacy flaws in  household robotics . The reports also highlight how  artificial intelligenc...

EP 280.  “When Your Everyday Tech Quietly Turns Against You”  “This week, a hobby project turned one man’s robot vacuum into a remote control for 7,000 homes, a new phishing service made the real login page your biggest enemy, and Texas decided your Wi‑Fi router is now a geopolitical issue.” Set the promise: “If you’re not technical but you live with passwords, smart gadgets, or online banking, th...

We open with China’s 8.7 billion-record megaleak, framing misconfigured infrastructure as a planetary-scale risk rather than a local breach. Lenovo’s U.S. class action then shows how invisible web trackers can quietly “spill” American browsing data to China, while South Korea’s heavy fines against Louis Vuitton, Dior, and Tiffany illustrate that even luxury brands now pay real money when they mish...

EP279. This week's update spills on a global scale.  We start with... A single misconfigured database just turned 8.7 billion Chinese records into a global reminder that at planetary scale, data protection failures stop being “incidents” and start looking like infrastructure risks. A new class action against Lenovo puts a spotlight on how invisible trackers and cross-border data flows can turn...

A mix of escalating geopolitical cyber risks, the changing landscape of defensive security, and a series of high-profile incidents demonstrating the enduring threat of human-driven flaws. Cyber Espionage and Geopolitics: A year-long, sprawling espionage campaign by a state-backed actor (TGR-STA-1030) compromised government and critical infrastructure networks in 37 countries, utilizing phishing an...

Episode 278 In this week's global update: A sprawling, year-long espionage campaign quietly turned government networks in 37 countries into a global listening post for a still-unattributed state-backed actor. Russian inspector spacecraft are no longer just loitering in orbit, they are now close enough to eavesdrop on, and potentially tamper with, Europe’s most critical communications satellite...

By early 2026, AI’s role has split into a clear paradox: consumers increasingly reject it in everyday search, while critical systems lean on it to uncover deep flaws and decode complex biology. AI is shunned as a source of noisy, untrusted summaries, yet embraced as an indispensable auditor of legacy code and genomic “dark matter,” where systems like AISLE and AlphaGenome expose decades-old vulner...

EP 277 In this week’s dark matter: Privacy-first users send a clear message to DuckDuckGo.  AI-free search is here to stay for most of its community. A cutting-edge AI from AISLE exposed deep-seated vulnerabilities in OpenSSL, exponentially speeding the pace of cybersecurity discovery. A security breach at eScan transformed trusted antivirus software into an unexpected cyber weapon. An internal pr...

In 2026, digital privacy and security reflect a global power struggle among governments, corporations, and infrastructure providers. Encryption, once seen as absolute, is now conditional as regulators and companies find ways around it. Reports that Meta can bypass WhatsApp’s end-to-end encryption and Ireland’s new lawful interception rules illustrate a growing tolerance for backdoors, risking weak...

EP 276. In this week's update: Ireland has enacted sweeping new lawful interception powers, granting law enforcement expanded access to encrypted communications and raising fresh concerns among privacy advocates and tech companies. TikTok’s latest U.S. privacy policy update expands location tracking, AI interaction logging, and cross-platform ad targeting, marking a significant escalation in d...

Unsecured Flock Safety Condor cameras were found livestreaming on the internet without passwords or encryption. The flaw exposed at least 60 cameras, allowing public access to feeds, downloads, and administrative controls. The researchers who disclosed the vulnerability reported facing police surveillance and job loss following what they termed their "responsible security research." The...