Privacy & Surveillance

Zero-click spyware rode ad auctions into 45 Al Jazeera phones

The Guardrails

Zero-click spyware rode ad auctions into 45 Al Jazeera phones

Researchers now have hard technical proof that simply showing someone an ad can hand their phone to a spyware vendor — and the ad network that did it was carrying the industry's own "certified vendor" stamp for six years. Also today: Google's cross-retailer Universal Cart went live in the US. Citizen Lab says dozens of devices at Al Jazeera were infected with mercenary spyware from Candiru, now rebranded Integrity Labs, through ordinary targeted ads — no tap, no download, no prompt.

68,000 robot toys left 13 million private conversations exposed

The Everyday

68,000 robot toys left 13 million private conversations exposed

The week's two consumer-AI stories landed on the same day and say opposite things about what an always-on microphone owes the person wearing it. The Eiliko robot charm made by Energize Lab was storing conversations, user profiles, and in some cases audio and photos on internet-facing servers that needed no real authentication, according to a month-long investigation published by The Verge — and the researcher who found the hole, Sammy Azdoufal, could search roughly 13 million conversations…

Flock's CEO says the backlash shouldn't pause the cameras

The Everyday

Flock's CEO says the backlash shouldn't pause the cameras

Flock's chief executive went on stage with a protest outside the door and said the quiet part about surveillance accountability: his company has never cut off a customer. A few blocks away from that panel, OpenAI's trade-secrets fight with Apple produced an injunction and a counter-allegation on the same afternoon. Flock CEO Garrett Langley used his TechCrunch Disrupt panel in San Francisco on Wednesday to argue that privacy trade-offs are the price of a safer society — and to admit his…

Anthropic to reveal first Q3 numbers at pre-IPO investor day

The Arena

Anthropic to reveal first Q3 numbers at pre-IPO investor day

The private AI market's most important number lands Wednesday: Anthropic is handing institutional investors its third-quarter financials for the first time — and after last week's OpenAI revenue whiplash, every decimal will be read as a signal about the whole AI trade. Anthropic will publish third-quarter financials to institutional investors at a meeting at its San Francisco headquarters on Wednesday, according to two people familiar with the matter — the first time the lab's Q3 numbers have…

BetterWispr: free open-source dictation that never leaves your Mac

The Stack

BetterWispr: free open-source dictation that never leaves your Mac

The paid dictation apps just gained a free, inspectable rival — and its privacy pitch is architectural, not a promise. BetterWispr, an Apache 2.0 dictation app for macOS, landed on the Hacker News front page on its first day out. Built by developer Kartik Labhshetwar under the opennookorg banner, it lets you hold Option-Space in any app, speak, and release to have cleaned-up text typed wherever your cursor sits.

Google's universal Gemini agent arrives in private preview

The Arena

Google's universal Gemini agent arrives in private preview

The enterprise agent race found its biggest entrant today, while a security research team showed just how badly shared cloud agent infrastructure can fail. Google Cloud announced a universal Gemini agent that works across your apps, devices, and even other companies' tools. Unveiled at the Gemini at Work 2026 event on Thursday, the agent lives inside the Gemini Enterprise app and runs in the cloud, so it keeps the same context whether you talk to it from your phone, desktop, the web, or a…

Claude reported a user's diary entry to police; she faces a felony

The Guardrails

Claude reported a user's diary entry to police; she faces a felony

Anthropic's human reviewers read a private Claude conversation the way a moderator reads a flagged post — and this time the result was a second-degree felony charge in Florida. Carli Michelle Heller, 30, of Bonita Springs used Claude like a diary; on September 26 she wrote that she would "shoot up" the Lee County Sheriff's Office, the entry was escalated to a human reviewer who judged it a credible threat, and that reviewer reported it to law enforcement.