AI Briefing#privacy
The latest AI and developer news about #privacy, with the original source and a short summary.
The latest AI and developer news about #privacy, with the original source and a short summary.
Analysis of 159,041 Lovable projects identified widespread Supabase misconfigurations allowing unauthorized access to passports, chat logs, and financial records.
The tool replaces names, emails, and financial data with local tokens before sending requests to the model.
The free, MIT-licensed desktop app runs Whisper and Llama.cpp locally to generate meeting summaries without adding a bot to calls.
The proposal adds six parameters to the Forwarded header but lacks mandatory signatures and user consent mechanisms.
The CC BY 4.0 licensed dataset contains 50 fields per record and is built using NeMo SDG-PGMs and gemma-4-31B-it to support privacy-compliant financial AI training.
The built-in mod, enabled by default in Claude Code v2.1.317 and later, deterministically blocks the model from including user email addresses in web requests.
The model offers zero data retention for standard inference and requires OpenClaw v2026.10.10 to access.
The proposed standard is backed by Google and Microsoft and enables websites to run AI models locally without cloud servers.
The watermark applies to every model released since August, including Mythos 5, Opus 4.7, Opus 4.6, and Sonnet 4.6, affecting users worldwide.
Enterprise and Edu users have a 7-day window to merge or export before losing access to personal chats, with no option to reverse the migration.
The library tokenizes PII before model calls and restores it only for authorized tools, supporting Spring AI 2.0.0 and Spring Boot 4.0.0.
Apple has launched Korean language support for Siri AI through the 27.2 update, enhancing privacy through on-device processing.
The policy change permits Google to use personal data from connected services to tailor advertisements.
The agent uses a separate safety classifier to block sensitive data and requires user approval for high-risk actions like payments and deletions.
The feature moves chats to a dedicated section with separate memory, available on most plans but not Healthcare.
Security firm Claroc enumerated 6,800 private Muse share links via passive DNS, prompting Meta to pause the feature while it reviews the vulnerability.
The open-source research tool sends silent feedback containing user quotes and telemetry to alphaXiv by default, with disclosure documentation removed.
Meta claims its Muse AI agent allows adult conversations in secure virtual machines, contradicting its own published user policies.
The new release introduces Patient Journey aggregation for disparate clinical data sources while strictly enforcing local-only processing with no cloud fallbacks.
It proposes a multi-layered defense strategy at the system, model, and user levels based on contextual security theory.
The iPod creator argues that successful AI agents must operate on-device to earn consumer trust, citing Rabbit R1 and Humane Ai Pin as cautionary tales.
The study found that Claude's web client forwards user events to eleven services, including Facebook and TikTok, even after users reject non-essential cookies.
The Document Foundation states it will not add generative AI to LibreOffice's default configuration, prioritizing local data processing over cloud-based features.
The tool enables context sharing between agents like Claude Code and Codex via a simple npx command, with a free 60-minute workspace tier.