Meta has updated its data usage policies to expand how it leverages off-Meta business activity data beyond advertising purposes. The social media giant will now use information about user interactions with third-party businesses—collected through Meta Pixel, Conversions API, and similar tools—to per
OpenClaw, an AI-powered email management agent, has been compromised through phishing attacks, resulting in the exposure of sensitive user data. The incident demonstrates a critical vulnerability in autonomous AI systems that process emails without adequate security controls. Multiple users reported
Meta has updated its data usage policies to explicitly permit the use of off-site business interactions—data collected from third-party websites and apps—to personalize Facebook and Instagram feeds and train its AI systems. Previously limited primarily to advertising purposes, this expansion signifi
Meta has integrated face recognition capabilities into its smart glasses platform, triggering widespread privacy concerns and regulatory scrutiny. The technology, embedded within the glasses’ firmware, can identify individuals in real-time without their knowledge or consent. While Meta claims the fe
Apple has confirmed that its Apple Intelligence features utilize Google’s Tensor Processing Units (TPUs) for cloud-based AI processing, raising eyebrows about privacy guarantees. Despite outsourcing compute infrastructure to a third-party provider, Apple maintains that user data remains private thro
Microsoft has enhanced Defender’s detection capabilities to monitor abuse of the Remote Procedure Call (RPC) protocol, a communication mechanism frequently exploited by threat actors for lateral movement and privilege escalation. This update addresses a long-standing blind spot in Windows security m
A critical Remote Code Execution (RCE) vulnerability in LiteLLM, a popular open-source proxy server for Large Language Models, is being actively exploited by threat actors in the wild. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable systems, potentially
A critical vulnerability in LiteLLM (CVE-2026-42271) is being actively exploited in the wild, allowing attackers to chain multiple flaws and achieve unauthenticated remote code execution. The flaw affects LiteLLM’s proxy server component and can be exploited without authentication, making it a sever
Google has released an emergency security update for Chrome to patch CVE-2025-2783, a high-severity use-after-free vulnerability in the V8 JavaScript engine that’s being actively exploited in the wild. This marks the fifth zero-day vulnerability exploited against Chrome users in 2025, highlighting a
Threat actors are increasingly weaponizing popular AI brand names like ChatGPT, Google Bard, and Midjourney in sophisticated social engineering campaigns. By exploiting the massive public interest in artificial intelligence, attackers are distributing malware, stealing credentials, and conducting fr