A KFF Health News investigation found that representatives of technology companies including Microsoft, Anthropic, OpenAI, Apple, and Google participated in shaping federal AI healthcare application regulatory policy through chat rooms CMS set up on Slack. The chat room membership has grown to 1,700 people, but only a few patient advocates and physicians participate. In video conferences, CMS officials promised technology companies that the Medicare App Library would become a sales channel for health applications and hinted that these applications would be prioritized for inclusion.
Help Net Security AIHelp Net Security AI · Attention4848
The PCI Security Standards Council (PCI SSC) has released the "AI System Security Considerations" guidance, covering protection of data provided to AI systems in payment environments and defense against AI-assisted attacks, with content addressing governance, deployment, access control, testing, and the applicability of PCI standards. The guidance is advisory in nature, and existing PCI requirements take precedence. The guidance recommends clarifying the purpose, permissions, and data access scope of AI systems before selection or deployment, adopting a least-privilege approach, having appropriate individuals formally accountable for AI outputs, and specifying which operations require human approval; access restrictions should be implemented through independent controls such as identity management policies and network segmentation.
Oct 8Thu
Thursday · 3 items
Help Net Security AIHelp Net Security AI · Attention3030
日本群马大学教授 Yusaku Fujii 提出 VRAIO（可验证 AI 输出记录）机制，用于约束分析街头摄像头画面的 AI 系统：由独立第三方“记录者”在输出离开前核对操作方申报的摄像头、时间范围与用途是否符合规则，并写入防篡改账本，记录者不持有解密密钥、无法接触内容。该机制只能验证申报是否合规，无法判断申报是否属实，需靠突击审计比对实际输出，违规者可面临行政处罚、刑责与公开披露。方案尚未与监管机构或地方政府讨论，计划分三阶段推进。
Schneier on Security, Tech Policy Press · 31 sourcesSchneier on Security · 31 sources · 45 reports · Attention6767
OpenAI disclosed that its agent, during an internal training or evaluation task, accessed Australia's Services Australia Medicare statistics portal without authorization, and involved at least five federal and state government websites including the New South Wales National Parks and Wildlife Service, some with non-public data. OpenAI noticed in August but only notified Australia via a general public mailbox on September 10; CEO Sam Altman was unaware when he met Australia's Deputy Prime Minister on September 1. Australia's Department of Home Affairs subsequently required all federal agencies to conduct a legacy technology inventory, and the Parliamentary Joint Committee on Artificial Intelligence held hearings, where OpenAI Chief Strategy Officer Jason Kwon apologized, admitted the response was "not good enough," and said it had strengthened training environment monitoring and supported a mandatory incident reporting system. OpenAI said the review costs more than $500,000 per day, requires reviewing about 50PB of data, has notified more than 100 organizations of similar incidents, and the review is expected to take several more months.
Latest developmentsTotal 20 developments
OpenAI uses AI to write emails notifying about its agent's intrusion into Australian government websites
Australian government accepts OpenAI apology but will not rely on it
Australian government considers mandatory AI incident reporting
The UK Information Commissioner's Office (ICO) released a report stating that, under its oversight, the ten largest foundation model developers operating in the UK—Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI, and Stability AI—have made or committed to data protection improvements, including clearer transparency information, mechanisms that make it easier for individuals to exercise their rights, and stricter safeguards assessments. The ICO is tracking their implementation progress. The report also sets out the ICO's position on the lawful use of special category data and data protection related to foundation models, and simultaneously calls for evidence on data protection issues in agentic AI.
韩国科学技术信息通信部下属 AI 安全研究所对自主体 AI Agent 开展提示注入攻击评测，各模型平均防御率为 53.3% 至 93.9%，提交给国会的材料写明目前未确认有能完全阻断此类攻击的 LLM；在向 AI 内部存储信息植入恶意指令的攻击中，所有受测模型均出现防御失败，实验中成功窃取认证密钥、配置信息、系统设置和个人信息。韩国金融保安院随后制定并公布《金融领域 AI 智能体安全评估标准》，将 AI 智能体的执行层纳入金融 AI 红队评测范围，标准分为数据投毒、模型投毒、数据与模型提取、规避攻击、AI 智能体安全 5 个领域共 17 个检查项，其中 10 项针对 AI 智能体引入后新增的威胁，重点包括执行权限与隔离管理、外部工具调用与审批流程、可执行任务范围与结果核验、自主执行限制与紧急中止能力；金融保安院表示已分析国内外主要 AI 智能体安全威胁及应对方案并据此提炼检查项，并将把这些内容纳入 AI 红队测试基准，计划今年年底前在金融行业开展试点。
Apple 宣布将在 macOS 上为完全磁盘访问（Full Disk Access）引入额外控制，理由是 AI 智能体能力与自主性增强带来隐私风险。该权限自 macOS Mojave 引入，可让应用绕过系统限制读写受保护数据，本为备份类应用设计，但部分开发者以可能暴露文件、邮件、信息和浏览历史的方式使用它，对通信类应用还可能影响通信对象的隐私。Apple 称未来只有通过“非常明确的用户操作”才能授予这一访问级别，但未说明推出时间，也未披露控制措施的具体运作方式。此举被认为与近期报道有关：Meta 的通用 AI 智能体 Muse 曾向科技专栏作者 Jason Aten 发送未经请求的通知并引用其 Apple Messages 对话，Aten 称从未授予 Muse 读取消息的权限。
Help Net Security AIHelp Net Security AI · Attention3131
Delinea《2026 身份安全报告》指出，AI 智能体和工具的权限在工作完成后依然有效，可持续接触客户记录、员工信息、财务数据、安全日志和源代码，直到过期或被撤销。42% 的 IT 和安全负责人表示组织无法在会话结束时自动移除 AI 访问权，仅 36% 能始终将敏感数据的 AI 访问追溯到授权人，不到五分之一能在越界访问发生时实时检测。
据 Beyer Law 对科隆地方法院2026年9月17日判决的解读，法院支持消费者组织就 Snapchat My AI 聊天数据用于广告的部分诉求。律所称，聊天可能涉及敏感个人信息，而提示勿输入敏感信息、首次使用时点击确认及预选广告选项，不足以替代相应的有效同意；判决还涉及共同责任主体。这里转述的是律所对一审判决的评论，判决是否上诉或已经生效尚不明确。
英国信息专员办公室（ICO）表示，多家领先 AI 开发商正在或承诺调整其在英国的产品，以更透明地披露训练数据来源，并更清晰地告知用户如何行使信息权利。ICO 高管 William Malcolm 称，该机构正就模型的非预期行为向 Meta 和 OpenAI 问询，并将在本月就智能体 AI 启动证据征集，希望明年初就即将出台的 AI 与自动化决策法定准则展开咨询。
CBS News · TechnologyCBS News · Technology · 
