The AI, Privacy, and Security Weekly Update

EP279. This week's update spills on a global scale.  We start with... A single misconfigured database just turned 8.7 billion Chinese records into a global reminder that at planetary scale, data protection failures stop being “incidents” and start looking like infrastructure risks. A new class action against Lenovo puts a spotlight on how invisible trackers and cross-border data flows can turn...

A mix of escalating geopolitical cyber risks, the changing landscape of defensive security, and a series of high-profile incidents demonstrating the enduring threat of human-driven flaws. Cyber Espionage and Geopolitics: A year-long, sprawling espionage campaign by a state-backed actor (TGR-STA-1030) compromised government and critical infrastructure networks in 37 countries, utilizing phishing an...

Episode 278 In this week's global update: A sprawling, year-long espionage campaign quietly turned government networks in 37 countries into a global listening post for a still-unattributed state-backed actor. Russian inspector spacecraft are no longer just loitering in orbit, they are now close enough to eavesdrop on, and potentially tamper with, Europe’s most critical communications satellite...

By early 2026, AI’s role has split into a clear paradox: consumers increasingly reject it in everyday search, while critical systems lean on it to uncover deep flaws and decode complex biology. AI is shunned as a source of noisy, untrusted summaries, yet embraced as an indispensable auditor of legacy code and genomic “dark matter,” where systems like AISLE and AlphaGenome expose decades-old vulner...

EP 277 In this week’s dark matter: Privacy-first users send a clear message to DuckDuckGo.  AI-free search is here to stay for most of its community. A cutting-edge AI from AISLE exposed deep-seated vulnerabilities in OpenSSL, exponentially speeding the pace of cybersecurity discovery. A security breach at eScan transformed trusted antivirus software into an unexpected cyber weapon. An internal pr...

In 2026, digital privacy and security reflect a global power struggle among governments, corporations, and infrastructure providers. Encryption, once seen as absolute, is now conditional as regulators and companies find ways around it. Reports that Meta can bypass WhatsApp’s end-to-end encryption and Ireland’s new lawful interception rules illustrate a growing tolerance for backdoors, risking weak...

EP 276. In this week's update: Ireland has enacted sweeping new lawful interception powers, granting law enforcement expanded access to encrypted communications and raising fresh concerns among privacy advocates and tech companies. TikTok’s latest U.S. privacy policy update expands location tracking, AI interaction logging, and cross-platform ad targeting, marking a significant escalation in d...

Unsecured Flock Safety Condor cameras were found livestreaming on the internet without passwords or encryption. The flaw exposed at least 60 cameras, allowing public access to feeds, downloads, and administrative controls. The researchers who disclosed the vulnerability reported facing police surveillance and job loss following what they termed their "responsible security research." The...

EP 275 This week, we update you on an "oops" that might have had you in its line of sight. Security researchers uncovered a major exposure of Flock Safety’s facial-tracking cameras openly livestreaming to the internet, prompting police visits and swift industry backlash. The FTC has finalized a landmark order requiring General Motors and OnStar to secure explicit consumer consent before...

Core message Personal AI, consumer devices, and global networks are converging into a new arena where data, infrastructure, and talent are strategic assets, not just products. Policy, open-source security, and novel computing architectures provide early but meaningful counterweights to surveillance capitalism and cyber conflict. AI: privacy vs convenience Privacy-first AI like Moxie Marlinspike’s...

EP 274.  In this week’s update: Moxie Marlinspike, architect of Signal’s groundbreaking privacy standards, now brings his uncompromising approach to secure, user-controlled artificial intelligence with the launch of Confer. The fifth annual Worst in Show anti-awards returned to CES 2026, shining a harsh spotlight on the year’s most wasteful, invasive, and counterproductive consumer electronics. We...

The new year opens with a familiar pattern: rising technological ambition colliding with real-world limits, fragile infrastructure, and recurring security failures. This week’s stories span energy, aviation, AI, extremism, and cybersecurity, but all share a common thread — systems scaled faster than the safeguards meant to protect them. Across the United States, communities are pushing back agains...

EP 273.  This year starts with the high cost of Electricity and gets left exposed. Communities Across America Mobilize Against Massive AI-Powered Data Center Expansions. Surging GPS Interference Disrupts U.S. Aviation, Highlighting Growing Vulnerabilities in Critical Infrastructure. Cybersecurity Researchers Outsmart Notorious Cybercrime Group with Elaborate Honeypot Trap. Malicious Chrome Extensi...

The brief describes how recent incidents collectively show a rapidly evolving, increasingly interconnected global cyber threat landscape that blends financial crime, strategic espionage, physical-world risk, and systemic surveillance failures. Financially Driven Cybercrime Cybercriminals are shifting to low-interaction, trust-exploiting techniques, such as clipboard-hijacking malware masquerading...

EP 272 In this last update for 2025, we span the fAce of the globe and find out we’ve gotten fLocked and fLoaded! Cybersecurity researchers from DARKNAVY have revealed a critical vulnerability allowing commercially available humanoid robots to be hijacked via simple voice commands, with exploits rapidly propagating to nearby machines. Fraudsters in China are increasingly exploiting AI-generated ph...

Our daily digital tools—browsers, apps, and smart devices—offer convenience but also expose us to hidden security risks. This guide reveals how ordinary technologies can imperil privacy and safety, focusing on three major areas: browser extensions, typo-prone website visits, and internet-connected cameras. The Hidden Spy on Your Browser Browser extensions, designed to block ads or save passwords,...

EP 271. For this week’s holiday update: Santa’s naughty list exposed in data breach.   A lighthearted reminder from a past holiday hoax: even Santa's list isn't immune to data breaches. How China Built Its 'Manhattan Project' To Rival the West in AI Chips.   China's clandestine push to master extreme ultraviolet lithography signals a major leap toward semiconductor self-suffici...

Global: Over 10,000 Docker Hub Images Found Leaking Credentials, Auth Keys The widespread exposure of sensitive keys in Docker images underscores the dangers of embedding secrets in container builds. Developers should prioritize centralized secrets management and routine scanning to prevent lasting breaches even after quick fixes. CN: Chinese Whistleblower Living In US Is Being Hunted By Beijing W...

EP 270.  In this week’s update:Security researchers uncover over 10,000 publicly available Docker Hub images exposing sensitive credentials and API keys, posing severe risks to production systems and AI services. A former Chinese official now seeking asylum in the United States reveals ongoing transnational harassment by Beijing, leveraging advanced surveillance tools-including those developed by...

Modern security is defined less by a single network perimeter and more by a web of interconnected partners, vendors, and shared infrastructure, where one weak link can trigger widespread impact. Criminals are exploiting this by abusing trusted relationships and platforms: in logistics, attackers impersonate freight middlemen to take over identities, push fake loads, and use malicious links to comp...

EP 269. In this week’s update:Organized crime syndicates are now recruiting skilled hackers to orchestrate sophisticated digital hijackings of entire truckloads of high-value cargo. A bizarre Windows preview update has turned the password field invisible, leaving Microsoft advising users to blindly click where the button once appeared. Australia’s $62 million weather-service overhaul launched on o...

The EPA approved two new PFAS-containing pesticides for food crops and plans four more. Scientists warn this deliberately increases dietaryexposure to persistent chemicals linked to cancer and birth defects. A magician who implanted an RFID chip in his hand for stage tricks forgot the password and is now permanently locked out of the device inside his own body. Perhaps he should have had the passw...

EP 268 The US Environmental Protection Agency (EPA) approves PFAS-containing pesticides for everyday food crops, opening a new pathway for “forever chemicals” to reach dinner plates. ​ A magician who implanted an RFID chip in his hand for performances discovers the ultimate trick: he’s permanently locked out by his own forgotten password. He must not be Gen X Fired Ohio contractor pleads guilty to...

This week's security landscape is defined by three converging vectors: the expansion of threats into physical and environmental domains, persistent vulnerabilities in core digital infrastructure, and the escalating strategic battle over data, privacy, and artificial intelligence. The lines between digital and physical threats are dissolving, forcing a new risk calculus where leaders must model non...

EP 267 In this week’s update: Wealthy Bitcoin holders in Switzerland are now learning to bite through zip ties as 'wrench attacks' shift crypto threats from cyberspace to real-world violence. Iceland has officially classified a potential collapse of the Atlantic Meridional Overturning Circulation (AMOC) as an existential national-security threat – the first time a climate phenomenon has re...