Bankrupt Spirit Airlines, in its bankruptcy proceedings, attempted to sell its data to Google for $10 million to train AI systems, including a large amount of employee data. EPIC lawyers wrote that the sale agreement only mentions consumer data and privacy, not employee privacy protections. The proposed data sale includes employee records dating back to 1986, time cards, payroll records, tax forms, emails, and Microsoft Teams messages. The flight attendants' union AFA-CWA has objected.
Reported on October 12, 2026, personal AI agents are connecting to enterprise systems through OAuth authorization, passwords saved in browsers, and API keys. Employees do not need to submit tickets, and enterprises find it difficult to register or decommission them. The report states that OpenAI's Dots is limited to enterprise accounts and deployed via Agent 365, xAI's GrokBot is distributed through Cursor, and Meta's Muse is currently limited to the United States and Canada. Most of the new controls added by vendors only cover enterprise-managed deployments; personal agents do not appear in the management console. The author suggests using identity as the control plane to allow safe use rather than banning them outright.
Apple 与 Google 正在推动一种“不保存录像”的 AI 摄像头方案：设备用 AI 处理视觉或音频数据后只生成文字摘要，原始数据在处理完成后即被删除。Apple Watch Series 12 与 Apple Watch Ultra 4 的 Audio Intelligence 中，Live Rewind 可生成过去 15 秒的转录，Siri Recap 能汇总全天对话，Apple 称这些功能“不录制音频”，且均为可选开启。
XX @ZenitySecX @ZenitySec · 2 reports · Attention2626
The financial industry is accelerating its adoption of agentic AI, and experts warn it could trigger rapid bank deposit outflows, bank runs, and even the next financial crisis. Meta's personal AI agent Muse, launched this month, has surpassed 3 million downloads but was blocked by Amazon from placing orders on its retail site. Apollo chief economist Torsten Slok warned that such agents could move household cash into accounts yielding 3.3% to 5.0%, while the national average for checking accounts is only 0.1%.
On October 1, 2026, Tech Policy Press published an article noting that age verification laws require users to submit sensitive identity information such as driver's licenses, birth certificates, passports, and even selfies to platforms or third parties, creating a data honeypot that hackers can attack. Security consultant Paul Moore said the European Commission's zero-knowledge proof age verification app could be compromised in less than two minutes; a Discord third-party vendor leaked approximately 70,000 government-issued ID documents; a dark web service this month listed 153 million scanned US and Canadian driver's licenses, allegedly traceable to IDScan.net. The article also mentioned that AI makes it easier for low-skilled attackers to succeed, with 71% of organizations experiencing at least one identity-related security incident last year.
Sep 29Tue
Tuesday · 1 items
OWIRED Security and AI, The Verge AI · 3 sourcesWIRED Security and AI · 3 sources · 7 reports · Attention2626
OpenAI released Dots, an always-on online AI agent, at DevDay 2026 in San Francisco. Powered by the GPT-6 Astra model, it continuously crawls the web, completes assigned tasks, pulls context from connected apps, and gradually learns user preferences. The feature is available to ChatGPT Pro subscribers at $100 per month and can be used via ChatGPT, Slack, and Microsoft Teams. Pro users can also join a waitlist to use it through iMessage or Android RC, with plans to bring it to the mass market in the future. Dots also offers "expert" versions for marketing, legal, and accounting. CEO Sam Altman said the company aims to "set a new standard for frontier AI privacy" and took a jab at Meta's rival Muse for failing to protect user data. Meta had previously marketed Muse as a safer alternative to its predecessor OpenClaw, but after launch, Meta itself could still access data from Muse. A security researcher had disclosed a zero-day vulnerability that could take over Muse (since fixed), and 404 Media also reported multiple serious security issues before launch.
Latest developments
OpenAI releases dots proactive assistant
OpenAI DevDay 2026 releases more than 20 announcements
ChatGPT、Claude、Google Gemini 和 Microsoft Copilot 等 AI 聊天机器人都不受美国联邦 HIPAA 约束，不属于覆盖实体，因此运营商可以泄露、出售或滥用你在提示词中输入的個人医疗信息。聊天机器人的永久记忆会持续积累你的健康档案并使其更具市场价值，且其友好自信的语气使 AI 幻觉更难辨别，可能带来严重医疗后果。
现有大语言模型已足以支撑一套实时监控系统：整合多源情报、实时分析并"建议"警方抓谁、去哪抓，而相关技术早已广泛部署。文章推演了一个近未来场景——FBI 以监控外国干预为名运营数百个 AI 机器人账号，渗透 Signal 和 Telegram 群组，结合批量购买的公共数据集、人脸识别与车牌追踪摄像头（如 Flock 运营的系统）锁定抗议者身份。作者认为，是否走向全面监控如今只取决于政策与预算优先级，不再受技术研发进度限制。
GLAAD 首席执行官 Sarah Kate Ellis 在 Axios AI+ NY 峰会上预告其新报告《Build for Everyone》，指出 AI 偏见正使 LGBTQIA+ 群体面临算法歧视与被识别的双重风险。该报告援引 2024 年 UNESCO 研究称，Meta 的 Llama 2 模型在约 70% 的情况下会针对同性恋者生成负面内容，将其描述为罪犯、异类和异常者。GLAAD 呼吁在整个 AI 生命周期贯彻隐私设计原则，并让人工智能开发者借助 PAI 的参与式包容性人口统计数据指南负责任地收集和使用人口统计数据进行公平性评估。
AI wearable devices such as Meta glasses and the Bee Pioneer wristband can record audio and video and analyze it in real time without others' knowledge, and the people recorded have almost no legal protection. Civil causes of action in the U.S. such as intrusion upon seclusion and right of publicity offer limited relief, and most regulations require plaintiffs to prove economic loss; Meta's policy states that even if people do not use its products, personal information appearing in images others share may still be used to train AI. Vendors such as Limitless only require users to obtain consent themselves, and for data deletion of non-consenting parties they promise only "commercially reasonable efforts."
The White House issued Executive Order 14409, "Advancing Advanced Artificial Intelligence Innovation and Security," on June 2, directing federal agencies to harden systems against AI-enabled threats, assess advanced cyber capabilities, and establish a vulnerability information sharing center, while requiring the Department of Justice to make using AI to commit cybercrime an enforcement priority. This Tech Policy Press analysis argues the order has transparency and accountability gaps: the benchmark process for determining whether a model meets the "covered frontier model" threshold will be classified, with the NSA Director making the final determination, the assessment framework is voluntary, there is no requirement to submit an unclassified summary report to Congress, the Government Accountability Office is not involved, and the public cannot obtain benchmark standards or assessment results through the Freedom of Information Act. The article notes the order focuses only on cyber risks and does not address the large-scale scraping of personal information when training frontier models, the profiling and inferential capabilities these models create, and their privacy implications.
A series of student essays from Harvard's Berkman Klein Center argues that privacy regulation should go beyond governing data to governing the inferential capabilities that models build on top of data. The essays cite 2024 research: prompting OpenAI's GPT-4 with a single Reddit post mentioning a hook turn correctly inferred that the user was in Melbourne, Australia; they also cite an FTC 2021 warning that "neutral" AI systems can produce discriminatory outcomes. The authors propose constraining inferential capabilities by expanding the definition of covered data, capability-based governance, and enforceable impact assessments.
Human rights workers and media forensics experts point out that techniques such as Gaussian blur and pixelation only reduce rather than delete image information, and AI can reconstruct it; blurring is no longer sufficient to protect subjects' identities. The author used a commercial AI refocusing tool on a published blurred photo of a child, and the facial structure re-emerged, making it possible to infer age, gender, ethnicity, and similarity—even if this does not amount to restoring the real face, it weakens anonymity. Experts unanimously recommend switching to solid color blocks to fully cover faces, bodies, tattoos, license plates, and buildings; Human Rights Watch has since 2024 changed its practice to avoid capturing identifiable information from the outset, such as photographing backs, obstructions, or shadows and excluding landmarks. The article also organizes a layered anonymization approach, including first replacing the real face with an AI-generated face before blurring, downsampling, heavy compression, adding noise, expanding the coverage area, and temporal processing for video, and emphasizes that such measures can only raise the cost of re-identification—no permanent solution exists. The article mentions that in January 2026, NPR reported that internet users attempted to use AI to reconstruct partially obscured images into faces for comparison against databases.
At the I/O conference, Google announced its biggest search overhaul in 25 years, upgrading Search to conversational AI Mode, which now has over 1 billion monthly active users. The article argues this "new era of AI search" may threaten democracy. AI Mode can call on Gmail, Google Photos, and Calendar to generate personalized answers. Over one-sixth of U.S. queries are multimodal, image search grew more than 40% quarter over quarter, and average query length is three times that of traditional search. The article also says Personal Intelligence has expanded to nearly 200 countries, and information agents can place orders on behalf of users via the Agent Payments Protocol. Google, which holds about 90% of the global search market, is gradually getting users to give up decision-making power.
Pope Leo XIV's first encyclical, Magnifica Humanitas, warns of AI risks to labor, truth, war, and inequality, but the author argues that AI's spiritual impact on prayer, confession, and moral discernment is overlooked in mainstream policy discussions. The author proposes a "sacred data ethics" framework, stating that spiritual expressions become "sacred data" that can be extracted, modeled, and reused once input into AI. U.S. privacy law does not distinguish sacred expression from ordinary data, and priest-penitent confidentiality privilege has not been extended to AI.
AI chat logs are entering courtrooms as evidence. In the Los Angeles Pacific Palisades wildfire case, Department of Justice officials cited the ChatGPT history of 29-year-old Jonathan Rinderknecht, including queries about whether cigarettes could cause fires and liability, as well as generated images of burning cities. The article also cites 18-year-old Ja-Zion Robertson of Virginia, sentenced to 25 years for asking Snapchat's My AI, and 19-year-old Ryan Schaefer, whose ChatGPT messages were linked to vandalism. In November 2025, a judge ordered OpenAI to hand over 20 million conversations to The New York Times' lawyers and to preserve related output logs. The author notes that AI platforms do not offer the confidentiality privileges of lawyers or therapists, and chat logs can be subpoenaed, seized by court order, or produced in discovery; legal scholars question whether existing frameworks are adequate for the reliability issues of AI evidence regarding bias, transparency, and explainability, and discuss whether new safeguards such as confidentiality warnings should be required of platforms.
Tech Policy PressTech Policy Press · 