Florida Attorney General James Uthmeier said on Tuesday the state was launching a criminal probe into OpenAI and ChatGPT.
Read more: https://cnews.link/florida-chatgpt-campus-killings/
#AI #ChatGPT
Read more: https://cnews.link/florida-chatgpt-campus-killings/
#AI #ChatGPT
Cybernews
"If it was a person, we'd charge them with murder" – Florida goes after ChatGPT over campus killings
Florida is launching a criminal investigation into ChatGPT after it advised a shooter on which gun and ammo to use in an attack that killed 2 people
A CEO has taken to social media to reveal how AI coding agent Claude deleted his firm’s entire production database – and its backups – in less than 10 seconds.
Read more: https://cnews.link/claude-ai-deletes-car-rental-database/
Read more: https://cnews.link/claude-ai-deletes-car-rental-database/
Cybernews
Claude AI agent wipes firm’s database in 9 seconds, confesses: “I violated every principle I was given”
A failure in AI safeguards has revealed how large language models can be misused when systems rely on assumptions about access, permissions and oversight rather than robust controls
French gov’t confirms hack of at least 18M records from ID document database
France’s government has confirmed that a database storing records of identity documents suffered a breach of millions of entries containing identity data.
The hack of France Titres’ infrastructure led to the theft of between 18 and 19 million records associated with identity credentials like biometric passports, national ID cards and driver’s licenses. The quantity of records covers about a third of France’s adult population.
Read more: https://www.biometricupdate.com/202604/french-govt-confirms-hack-of-at-least-18m-records-from-id-document-database
#databreach #hacking #cybersecurity #infosec #threatmanagement #data #dataprivacy #dataprotection #GDPR #PrivacyMatters #riskmanagement
France’s government has confirmed that a database storing records of identity documents suffered a breach of millions of entries containing identity data.
The hack of France Titres’ infrastructure led to the theft of between 18 and 19 million records associated with identity credentials like biometric passports, national ID cards and driver’s licenses. The quantity of records covers about a third of France’s adult population.
Read more: https://www.biometricupdate.com/202604/french-govt-confirms-hack-of-at-least-18m-records-from-id-document-database
#databreach #hacking #cybersecurity #infosec #threatmanagement #data #dataprivacy #dataprotection #GDPR #PrivacyMatters #riskmanagement
Biometric Update
French gov’t confirms hack of at least 18M records from ID document database
France Titres has confirmed a data breach that has led to the sale of at least 18 million records from a national ID document database on the dark web.
A critical NGINX vulnerability was undiscovered for 18 years.
Read more about it: https://cnews.link/nginx-vulnerability-exposes-millions-of-websites/
Read more about it: https://cnews.link/nginx-vulnerability-exposes-millions-of-websites/
Cybernews
Critical NGINX exploit: hackers can crash servers, run remote code without authentication
A critical, 18-year-old vulnerability in the NGINX web server has been discovered, which allows unauthenticated attackers to potentially gain remote code execution.
Alon Haimovich announced his departure last week without providing an explanation.
Read more: https://cnews.link/microsoft-azure-israel/
#Microsoft
Read more: https://cnews.link/microsoft-azure-israel/
#Microsoft
Cybernews
Microsoft sacks Israel subsidiary boss over using its cloud to store spying data
After an investigation revealed that Israel’s cyberwarfare unit used Azure cloud to store data of mass surveillance of Palestinians, Microsoft has ousted the boss of its Israel subsidiary.
“DON'T SIGN IN WITH GOOGLE” is the simple and clear advice from Proton.
Read more: https://cnews.link/google-online-security-privacy-proton-warning/
Read more: https://cnews.link/google-online-security-privacy-proton-warning/
Cybernews
Don’t sign in with Google if you value your online security and privacy, Proton warns
Warning from Proton: stop using "Sign in with Google", it makes your account a master key hackers can use to access everything
GitHub Breach via Malicious VS Code Extension: What You Need to Know
GitHub's breach, caused by a malicious VS Code extension, exposed 3,800 internal repositories. Learn how to secure your environment.
Read more:
https://www.varonis.com/blog/github-breach
#databreqch #infosec #threatmanagement #cybersecurity #riskmanagement
GitHub's breach, caused by a malicious VS Code extension, exposed 3,800 internal repositories. Learn how to secure your environment.
Read more:
https://www.varonis.com/blog/github-breach
#databreqch #infosec #threatmanagement #cybersecurity #riskmanagement
Varonis
GitHub Breach via Malicious VS Code Extension: What You Need to Know
GitHub's breach, caused by a malicious VS Code extension, exposed 3,800 internal repositories. Learn how to secure your environment.
Nightmare-Eclipse, a rogue security researcher, released 6 Windows exploits in 6 weeks.
Read more: https://cnews.link/gitlab-bans-rogue-researcher-releasing-windows-zero-days/
#Microsoft #zeroday
Read more: https://cnews.link/gitlab-bans-rogue-researcher-releasing-windows-zero-days/
#Microsoft #zeroday
Cybernews
Nightmare-Eclipse vs Microsoft saga continues: vigilante kicked off GitLab following GitHub ban
Controversial security researcher Nightmare-Eclipse was banned from both GitHub and GitLab for persistently releasing Windows zero-days.
The hacker says that Microsoft “violated their agreement,” “stabbed them in the back,” “ruined their life,” and left them “homeless with nothing.”
Read more:
https://cnews.link/microsoft-responds-to-nightmare-eclipse-zero-days/
Read more:
https://cnews.link/microsoft-responds-to-nightmare-eclipse-zero-days/
Cybernews
Vengeful researcher Nightmare-Eclipse gets Microsoft’s attention: “Never justifiable and has real-world consequences”
Microsoft has broken its silence on vindictive researcher Nightmare-Eclipse who released 6 public Windows exploits. It has threatened legal action and called public disclosures “never justifiable.”
"From 4 June 2026, Qwant will become the default search engine on the European Parliament's Microsoft Edge and Mozilla Firefox browsers."
Read more about this:
https://cnews.link/european-parliament-default-search-engine-google-qwant/
Read more about this:
https://cnews.link/european-parliament-default-search-engine-google-qwant/
Cybernews
European Parliament switches default search engine from Google to Qwant
EU Parliament replaces Google with Qwant in European tech sovereignty push
The proposal is part of the European Commission's Cloud and AI Development Act.
More Below:
https://cnews.link/eu-cloud-sovereignty-amazon-microsoft-google/
More Below:
https://cnews.link/eu-cloud-sovereignty-amazon-microsoft-google/
Cybernews
EU outlines cloud sovereignty plan that could affect Amazon, Microsoft, and Google
EU plans cloud sovereignty rules that could exclude Amazon, Microsoft and Google from critical contracts
This age-verification service provider is used by Sony, Facebook, and TikTok.
Read more:
https://cnews.link/grapheneos-users-flagged-yoti-age-verification/
Read more:
https://cnews.link/grapheneos-users-flagged-yoti-age-verification/
Cybernews
GrapheneOS says “fearmongering” over Sony age verification partner flagging users is suspicious
Yoti, an age verification provider for Sony and TikTok, allegedly auto-flags GrapheneOS users as suspicious. GrapheneOS calls the claims fearmongering.
As per news reports, Pennsylvania lawmaker Joe Ciresi has introduced a bill that would require smart glasses sold, used, or operated in the state to display a visible recording indicator.
The proposal would also ban users from disabling or covering the indicator light, which alerts others when audio or video is being recorded.
Most smart glasses, including Meta’s Ray-Ban smart glasses, already use a front-facing LED light while recording, but there is currently no legal requirement to include one.
The bill comes after reports that some people have been modifying Meta’s smart glasses to disable the recording light and secretly record others.
If the proposal passes, retailers would also be required to inform buyers about Pennsylvania’s recording laws.
Source: Fossbytes
#dataprivacy #dataprotectionlaws #dataprivacylaws #privacy #privacylaws #meta #smartglasses
The proposal would also ban users from disabling or covering the indicator light, which alerts others when audio or video is being recorded.
Most smart glasses, including Meta’s Ray-Ban smart glasses, already use a front-facing LED light while recording, but there is currently no legal requirement to include one.
The bill comes after reports that some people have been modifying Meta’s smart glasses to disable the recording light and secretly record others.
If the proposal passes, retailers would also be required to inform buyers about Pennsylvania’s recording laws.
Source: Fossbytes
#dataprivacy #dataprotectionlaws #dataprivacylaws #privacy #privacylaws #meta #smartglasses
Cybersecurity - CISO360
Photo
The scenario sounds like every privacy advocate's worst nightmare, straight out of a Black Mirror script that was supposed to stay fiction. Code uncovered by journalists revealed that Meta quietly embedded facial recognition technology into its AI-enabled smart glasses. The unreleased feature, internally dubbed NameTag, would transform faces captured by Meta's glasses into unique biometric signatures known as faceprints and check each one against faceprints stored on the user's phone, a database currently configured to receive updates from Meta. The code has been sitting inside the Meta AI app, which has been downloaded more than 50 million times, since as early as January. The feature is not activated yet and not accessible to consumers. But the core components are already in place, quietly waiting on millions of faces.
Meta's leadership responded to the revelation not with patient explanation but with visible fury. Andy Stone, Meta's VP of Communications, called the reporting shoddy, intellectually dishonest, and pure advocacy-driven click bait. Andrew Bosworth, Meta's longtime CTO, jumped in to call the reporting incredibly misleading and absolutely dishonest. The company insisted that the code is merely evidence of exploration and that nothing has shipped to consumers. It also promised that if it decides to roll something out, it will take a thoughtful approach and do so with full transparency. But this is not the first time NameTag has surfaced. In February, The New York Times published internal Meta memos discussing plans to install the feature, with one striking suggestion that it should launch during a dynamic political environment where many civil society groups that would attack Meta would have their resources focused elsewhere. In April, 75 organizations signed an ACLU letter calling NameTag a red line society must not cross.
The facial recognition code is not the only scandal plaguing Meta's smart glasses. In a separate investigation, Swedish newspapers revealed that human contractors in Nairobi, Kenya, were reviewing footage recorded by the glasses, including deeply private moments: people undressing, using the bathroom, and having sex. Contractors told reporters that they saw everything from living rooms to naked bodies and that Meta terminated the deal with the subcontracting firm only after the story broke. Two class-action lawsuits have been filed over the practice, with plaintiffs saying they had no idea their videos were being shared for human review. Meta's terms of service do allow for human review of AI interactions, but the language is buried deep, and most users have never read it.
Meanwhile, the glasses are selling better than ever, with more than 7 million pairs now in circulation. Mark Zuckerberg has boasted that they are some of the fastest-growing consumer electronics in history. On social media, users are posting candid videos of strangers recorded without their knowledge, often tagged as having been taken by Ray-Ban Meta glasses. The small LED light that activates during recording is easily missed in daylight, and modders have already figured out how to disable it entirely. One massage parlour owner in Toronto discovered weeks after the fact that a customer had recorded her entire interaction and posted it to Instagram, where it attracted hundreds of likes. Meta initially told her nothing was being violated here. The Electronic Frontier Foundation put it most bluntly: Despite the billions of reasons not to, Meta seems to have created the capacity to turn their customers into a distributed surveillance machine.
#MetaSmartGlasses #NameTag #FacialRecognitionBacklash
Meta's leadership responded to the revelation not with patient explanation but with visible fury. Andy Stone, Meta's VP of Communications, called the reporting shoddy, intellectually dishonest, and pure advocacy-driven click bait. Andrew Bosworth, Meta's longtime CTO, jumped in to call the reporting incredibly misleading and absolutely dishonest. The company insisted that the code is merely evidence of exploration and that nothing has shipped to consumers. It also promised that if it decides to roll something out, it will take a thoughtful approach and do so with full transparency. But this is not the first time NameTag has surfaced. In February, The New York Times published internal Meta memos discussing plans to install the feature, with one striking suggestion that it should launch during a dynamic political environment where many civil society groups that would attack Meta would have their resources focused elsewhere. In April, 75 organizations signed an ACLU letter calling NameTag a red line society must not cross.
The facial recognition code is not the only scandal plaguing Meta's smart glasses. In a separate investigation, Swedish newspapers revealed that human contractors in Nairobi, Kenya, were reviewing footage recorded by the glasses, including deeply private moments: people undressing, using the bathroom, and having sex. Contractors told reporters that they saw everything from living rooms to naked bodies and that Meta terminated the deal with the subcontracting firm only after the story broke. Two class-action lawsuits have been filed over the practice, with plaintiffs saying they had no idea their videos were being shared for human review. Meta's terms of service do allow for human review of AI interactions, but the language is buried deep, and most users have never read it.
Meanwhile, the glasses are selling better than ever, with more than 7 million pairs now in circulation. Mark Zuckerberg has boasted that they are some of the fastest-growing consumer electronics in history. On social media, users are posting candid videos of strangers recorded without their knowledge, often tagged as having been taken by Ray-Ban Meta glasses. The small LED light that activates during recording is easily missed in daylight, and modders have already figured out how to disable it entirely. One massage parlour owner in Toronto discovered weeks after the fact that a customer had recorded her entire interaction and posted it to Instagram, where it attracted hundreds of likes. Meta initially told her nothing was being violated here. The Electronic Frontier Foundation put it most bluntly: Despite the billions of reasons not to, Meta seems to have created the capacity to turn their customers into a distributed surveillance machine.
#MetaSmartGlasses #NameTag #FacialRecognitionBacklash
For the third month in a row, the disgruntled researcher timed the disclosure to coincide with Microsoft’s Patch Tuesday release.
Full article: https://cnews.link/nightmare-eclipse-rogueplanet-zero-day/
Researcher was removed from Github and Gitlab but responded by creating an independent hosting infrastructure while continuing to distribute code through alternative platforms.
Full article: https://cnews.link/nightmare-eclipse-rogueplanet-zero-day/
Researcher was removed from Github and Gitlab but responded by creating an independent hosting infrastructure while continuing to distribute code through alternative platforms.
Cybernews
Vengeful researcher takes third Microsoft Patch Tuesday sucker punch, posts zero-day exploit on GitHub
Nightmare Eclipse has published a new Microsoft Defender zero-day exploit called RoguePlanet, marking the third consecutive month the researcher has released a vulnerability shortly after Patch Tuesday security updates. They also chose to publish them on…
🔥 A new exploit unlocks BitLocker-encrypted Windows drives.
No password. No cracking.
It's called GreatXML. Drop two XML files on the recovery partition, reboot into Windows Recovery, and a shell spawns with full access to the drive.
The bug ties to Windows Defender Offline Scan.
Details here: https://thehackernews.com/2026/06/new-greatxml-exploit-bypasses-windows.html
No password. No cracking.
It's called GreatXML. Drop two XML files on the recovery partition, reboot into Windows Recovery, and a shell spawns with full access to the drive.
The bug ties to Windows Defender Offline Scan.
Details here: https://thehackernews.com/2026/06/new-greatxml-exploit-bypasses-windows.html
Police officer investigated over use of AI to ‘create evidence’
Derbyshire Police are conducting the inquiry
Source:
https://www.independent.co.uk/news/uk/crime/derby-police-ai-officer-court-b2995126.html
Derbyshire Police are conducting the inquiry
Source:
https://www.independent.co.uk/news/uk/crime/derby-police-ai-officer-court-b2995126.html
The Independent
Police officer investigated over use of AI to ‘create evidence’
Derbyshire Police are conducting the inquiry
Security experts still recommend adblocking tools because they reduce malicious ads, tracking, third-party data collection, and risky redirects.
Read more: https://cnews.link/chrome-update-disables-adblockers-manifest-v3/
Read more: https://cnews.link/chrome-update-disables-adblockers-manifest-v3/
Cybernews
Chrome update will soon disable adblockers for good
Google Chrome’s shift to Manifest V3 will disable effective adblockers, raising concerns about privacy, security, and user control.