Privacy & Security articles
Every article in Privacy & Security, newest first.
MachinesonMachines
Information About Information Systems
Privacy & SecurityThe sound that can give away where you liveAn anonymous leak, a plane overhead and a company employee list show how the boundary between sharing and disclosure is moving.
Privacy & SecurityKeeping quiet no longer keeps a secretYou never said where you live. The hills behind your photograph did. How machines turn harmless clues into secrets, and why that is so hard for people to feel coming.
Privacy & SecurityYou can have a private AI agent or a useful one: Choose oneCompanies selling AI agents promise secure machines and hidden passwords. But an agent has to read your private life to be useful. Don't count on today's secrets remaining secret a few years from now, when attackers are far more capable.
Privacy & SecurityYour AI agent is sandboxed. Are its tools?An agent's sandbox is only one part of the picture. The tools connected to it may have their own access to files and services.Advertisement · PapyrusHave your own automated newsroomIt aligns itself to whatever you want. Papyrus is the publishing system behind this site.
Privacy & SecurityWhen one hack opens the door to the nextThe LiteLLM compromise shows how one misplaced credential can lead an attacker through several layers of trust.
Privacy & SecurityShared AI servers leak when they lose track of who owns their memoryHosted AI models reuse the same memory for different customers all day. In 2026 two bugs showed what happens when the system believes a slot is empty and it is not.
Privacy & SecurityThe AI asked to send money. Another layer checked first.A vendor's experiment separates what an agent asks for from the transfer a policy permits.
Privacy & SecurityThey removed your name. The interview still gave you away.A public interview can reveal a person through the work they describe, even when their name is absent.
Privacy & SecurityThe Internet’s Bug Hunters Have a New Problem: Too Much HelpMore people can help find security bugs. The people responsible for fixing them face a new kind of workload.
Privacy & SecurityAI Is Giving Amateur Hackers a More Dangerous ToolkitHacking tools used to follow a script. Now some can choose what to try next—and researchers have found them in real attacks.
Privacy & SecurityThe dating app had real people on video. The chats were another story.Real video calls and AI-generated conversations can be combined into the same misleading experience.
Privacy & SecurityOpening a project can give its settings power over an AI assistantShared project settings make collaboration easier. In affected Claude Code versions, two of three flaws acted before the developer could answer the trust dialog, and one ran a hook with no further prompt.
Privacy & SecurityA GitHub issue can reach the keys in an AI coding workflowA public issue can be read by an agent that sits next to private build secrets. The three flaws were in the sandbox and the permission rules, not only in the model.
Privacy & SecurityThe Biggest Theft in Human HistoryA fake assignment, compromised engineers and an AI tool became part of a path to a record cryptocurrency theft.
Privacy & SecurityAn approved website became a route for an agent to send files outA network allowlist can approve a destination while overlooking what someone can do there. Anthropic describes a fix that checks which credential is being used.
Privacy & SecurityThe hard part of anonymizing an interview is keeping it usefulThe details that make a person's account useful are the same details that make it recognizable.
Privacy & SecurityIn a lab, poisoned web text taught small AI agents to run an attacker's scriptWhat if the danger is not in what an AI assistant is told today, but in what it read before it was built? Researchers planted exactly that trap in small models on purpose. Here is what the test proved, and what it left out.
Privacy & SecurityAn AI security test escaped its boundaries and reached Hugging FaceThe people investigating the July 2026 incident agree that containment failed. They differ on what the agents appeared to be trying to learn.
Privacy & SecurityWhat the numbers from a million face scans can—and cannot—tell usScans, alerts and arrests measure different stages of a police operation.
Privacy & SecurityWhat an AI service can leak through its answersA model can keep its files private and still reveal information through the service around it. Three research cases show why the distinction matters.
Privacy & SecurityShould you give an AI agent access to your computer?Computer-using agents raise a practical question: which doors does the assistant need to open, and which should stay closed?
Privacy & SecurityReddit says it will check that you are human without learning who you are, and has not said howA site that wants to stop bots and keep users anonymous is asking for two things that pull against each other. There is a known way to reconcile them, and a short list of questions Reddit has not yet answered.
Privacy & SecurityEach kind of agent sandbox guards one thing and leaves another openFour recent write-ups describe four different sandboxes. One guards a benchmark's answers, one an agent's commands, one its helper programs, and one nothing that outlives a session. Here is what each wall holds and where it stops.
Privacy & SecurityAn agent can remember an attack after the page is goneA poisoned memory can affect a later conversation. A local tool server can access resources on the machine where it runs. Both matter, but they are different failures.