The AI, Privacy, and Security Weekly Update

EP 254.  In this week's update: Despite back-to-back data breaches and legal blowback, women are still queuing up by the millions for Tea.  This is one hot dating app that's apparently more viral than secure. North Korean IT operatives are clocking into remote jobs worldwide. Fueled by GenAI and fake identities in what CrowdStrike calls a daily cybersecurity crisis. A British luggage start...

Germany’s Tech-Driven Warfare & Ethical Implications Germany is integrating AI, robotics, and human-machine teaming into its military, deploying tech like robotic cockroaches for surveillance and mini-robots for urban combat. These innovations aim to enhance decision-making and minimize human risk. Yet, critics warn of ethical and legal concerns, especially around loss of human oversight in le...

EP 253. In this update we find out that... Germany’s military is diving into sci-fi territory with AI-powered robots and spy cockroaches.  What futuristic tactics are they cooking up to redefine the battlefield?  We find out, and then bug out. Astronomer Hires Coldplay Lead Singer’s Ex-Wife as Temporary Spokesperson: Gwyneth Paltrow.  A viral Kiss Cam scandal rocks Astronomer, leading to resignati...

A single compromised password led to the collapse of 158-year-old UK logistics firm KNP, after hackers—suspected to be the Akira gang—used it to gain access, encrypt systems, and demand a £5 million ransom. Unable to pay, the company lost all its data and folded, putting 700 employees out of work. The breach underscores how weak access controls can have catastrophic consequences. To counter massiv...

EP 252. In this week's update: ​ A single compromised password enabled ransomware actors to bankrupt a 158-year-old British logistics firm, exposing the catastrophic business risks of weak access controls. Google launches its most aggressive legal action yet to dismantle a massive botnet infecting over 10 million devices, signaling a strategic shift toward litigation-led cyber defense. Securit...

Significant Data Breaches and Vulnerabilities McDonald's AI-driven hiring platform, Olivia (by Paradox.ai), exposed 64 million applicant records due to weak security, including a password as simple as "123456." In Sweden, security personnel inadvertently revealed Prime Minister Ulf Kristersson’s whereabouts by sharing fitness routes on Strava. Qantas suffered a breach affecting 5.7 m...

EP 251. This week's update with a side of Fries.... McDonald’s AI-driven hiring platform faces scrutiny after a critical security flaw exposed millions of applicants’ personal data to potential hackers.   Swedish security personnel inadvertently disclosed Prime Minister Ulf Kristersson’s private whereabouts through fitness app Strava, raising national security concerns.  Qantas confirms a mass...

Emerging Trends in Privacy, Security, and AI Decentralized, Offline Messaging with Bitchat Jack Dorsey’s Bitchat is a privacy-first messaging app that bypasses internet and servers, using Bluetooth Low Energy (BLE) mesh networking to transmit encrypted, ephemeral messages between nearby devices. It doesn’t require phone numbers, accounts, or cloud storage, and messages disappear by default. Bridge...

This week takes us from blueteeth to AI emotional support Jack Dorsey’s innovative Bitchat app pioneers secure, internet-free messaging via Bluetooth, redefining decentralized communication. Google’s Gemini AI introduces context-aware assistance on Android, sparking privacy debates with its opt-out data access model. A major breach exposes Catwatchful’s invasive stalkerware, compromising thousands...

North Korean IT Worker Fraud Scheme: The U.S. Department of Justice uncovered a covert North Korean operation involving IT workers fraudulently securing remote jobs at over 100 American tech companies using stolen or fake identities. These workers operated within U.S.-based "laptop farms" and created shell companies to obscure over $5 million in illicit earnings. Funds were funneled to t...

This week we've got loads of news and loadsa money! North Korean IT workers secretly landed remote jobs at over 100 U.S. tech companies, funneling millions to fund Kim Jong Un’s weapons program.  The operation ran for years undetected—until the FBI knocked on the wrong contractor’s door. Android 16 is getting a stealthy new feature that alerts users when their phone connects to suspicious cell...

What are the latest trends in large-scale cyberattacks, and how can individuals help prevent them? Large-scale cyberattacks, especially Distributed Denial of Service (DDoS), are growing in both scale and sophistication. One recent attack hit 7.3 Tbps, unleashing 37.4 TB of junk traffic in 45 seconds. These attacks often harness botnets made up of compromised Internet of Things (IoT) devices—like h...

In this week's update: A massive 7.3Tbps DDoS attack overwhelmed a Cloudflare customer’s site with 37.4 terabytes of junk traffic in just 45 seconds, highlighting the growing scale of cyber threats. Smart TVs equipped with Automatic Content Recognition (ACR) technology track viewing habits across devices, raising significant privacy concerns due to extensive data collection. Then the UK’s Info...

Windows Hello's Facial Authentication Update Microsoft updated Windows Hello to require both infrared and color cameras for facial authentication, addressing a spoofing vulnerability. This enhances security but disables functionality in low-light settings, potentially inconveniencing users and pushing some toward alternatives like Linux for flexible authentication. EchoLeak and AI Security &#3...

EP 247. ... and in this update, Microsoft has updated Windows Hello to require both infrared and color cameras for facial authentication, improving security by addressing a spoofing vulnerability, though it now requires visible lighting. This increases biometric reliability and inconvenience to users in low-light settings. Consider exploring alternative operating systems like Linux for flexible au...

Meta and Yandex covertly tracked Android users through their apps, which listened silently on local ports to intercept browsing data and link online activities to user identities, evading common privacy measures like cookie deletion or Incognito Mode. Users can protect themselves by uninstalling these apps, switching to privacy-focused browsers (e.g., Firefox, Brave, DuckDuckGo), and closely manag...

EP 246 ...And in this update, the subject of overreach.  Just last week, Meta and Yandex ceased covert tracking practices on Android apps that exploited localhost communications to collect user data, prompting recommendations to use privacy-focused browsers like Firefox, Brave, or DuckDuckGo.   The ACLU filed a lawsuit against Sonoma County, California, alleging its drone program, initially for tr...

Recent digital developments show a growing gap between technological innovation and the protections needed to safeguard privacy, autonomy, and society at large. A string of high-profile incidents showcases the systemic vulnerabilities across sectors. Data breaches remain rampant. LexisNexis Risk Solutions, a leading data broker, suffered a breach via a third-party vendor, compromising the PII of o...

EP 245 In this week's update:  A trove of sensitive Russian nuclear facility documents was unintentionally published through a government procurement site, revealing critical infrastructure details, raising global security concerns and providing your child's science class with a new talking point. A new study shows that large language models struggle to manage even simple long-term busines...

Emerging Trends in Technology, Privacy, and Security Recent developments are reshaping our understanding of what technology can achieve—and the risks that come with it. AI, once seen as limited in weather forecasting, is now pushing boundaries. Google's GraphCast, tested by the University of Washington, has demonstrated surprising accuracy forecasting weather up to 33 days out, challenging the...

EP 244.  In this week's update:  AI is rewriting the rules of meteorology, with new models like GraphCast showing potential to accurately predict weather up to 33 days in advance—challenging a long-standing two-week limit.  But today's weather could remain a challenge As global temperatures rise, invasive and deadly fungi like Aspergillus are spreading into new regions—posing increasing ri...

What physical security measures are recommended for protecting high-value wallet signers' homes? Recommendations include implementing a high-security safe (like a TL-30 rated safe) for storing hardware wallets and seed phrases, reinforcing doors and using strong locks such as deadbolts and smart locks with biometric access. Inside, security cameras with remote monitoring are advised for critical a...

Cybersecurity Evolution: Cybersecurity has evolved from early academic and hobbyist roots—like 1970s viruses and 1980s ransomware—to defending against today's state-sponsored attacks, data breaches, and AI-driven threats. Each decade brought new challenges: the 1990s saw internet threats prompting firewalls and encryption; the 2000s introduced mass-scale DDoS and data theft; and the 2010s brou...

EP 243. In this week's update:   A History of Cybersecurity From Cold War codebreakers to cloud-native firewalls, the story of cybersecurity is a decades-long arms race between innovation and intrusion. Rogue Communication Devices in Chinese Inverters When your solar panels start phoning home to places you didn’t authorize, it’s time to rethink who you trust with your grid. Microsoft Teams Cap...

The evolving digital and geopolitical landscape reveals mounting tensions between innovation, privacy, and national security. A proposed $400 million private jet gift to Donald Trump from Qatar exemplifies this collision of interests. Though offered at no cost, the aircraft would require extensive and costly retrofitting to meet U.S. presidential security standards—ranging from secure communicatio...