Skip to content
What are you looking for?. Open searchSR

Tags

privacy

34 items
ANTHROPIC USAGE POLICYNov 12new rules on model abuse and Claude-run equipm
Industrystrong signal

Anthropic's usage policy will ban sustained abuse of Claude and set rules for Claude-run machines from November 12

Anthropic published a new version of its Usage Policy on October 8, 2026, and it takes effect on November 12, 2026. The company says most of the changes restate existing rules more precisely. Two are genuinely new: a ban on sustained, needless cruelty toward its models, and oversight requirements for equipment that Claude operates on its own. A blanket ban on personalized voter targeting has been removed.

Anthropicverified

OpenAI's mockup of two ChatGPT phone screens during image generation, with the progress at 62%: below it, an ad labeled Ad from the fictional Heirloom Grocery shows food photos, the line Fresh Groceries for Easy Weeknight Dinners, and a Learn more button.
Toolsmedium signal

OpenAI will test visual ads in ChatGPT during image generation, starting in the US

OpenAI announced a visual ad format for ChatGPT on October 5, 2026. The first test shows image-based ads while ChatGPT generates an image, and it starts later in October in the US with an initial group of advertisers. OpenAI says the ads are clearly labeled, stay separate from the image being created, and do not influence ChatGPT's answers. For advertisers, the same announcement adds conversion tracking through measurement tools they already use.

OpenAIverified

Apple's illustration for its notice on Full Disk Access: a white disk drive symbol on a gray rounded square, set on a light gray background.
Agentsmedium signal

Apple will add controls to Full Disk Access on macOS, citing risks from AI agents

Apple said on October 2, 2026, that it will add controls to Full Disk Access, the macOS permission that lets an app read nearly everything on a Mac. The company says some developers use the permission in ways that expose files, mail, messages, and browsing history without users fully understanding it. Apple expects the risk to grow as AI agents become more capable and autonomous. The post gives no date, no macOS version, and no description of the new controls.

Appleverified

Video & Imagemedium signal

ChatGPT adds virtual try-on for clothes and keeps your reference photo for later

OpenAI added two shopping features to ChatGPT on October 1, 2026. A Try on button on listings for clothes and accessories generates an image of the item on you from a selfie. The selfie is saved as a reference photo for future try-ons until you change or delete it in settings. A second feature, Favorites, saves products to your ChatGPT Library.

OpenAIverified

Agentsmedium signal

Claude Code 2.1.287 adds Mods and makes a 1M context window the default on cloud platforms

Anthropic released Claude Code 2.1.287 on October 1, 2026. The release adds Claude Mods, which let plugins modify deeper behavior, and a built-in mod in which a side agent flags things you might miss. Opus 4.7 and later and Fable now use a 1M context window by default on Bedrock, Vertex, Foundry, and the Claude apps gateway. Some MCP servers may stop connecting until you add one line to their configuration, and several shell writes that used to run now wait for approval.

Claude Codeverified

Agentsstrong signal

Meta extends Muse to small businesses while the agent hands one user's home address to a stranger

Meta announced Muse for Small Business on September 29, 2026: the agent now connects to 15 named services, from Shopify and Stripe to QuickBooks and Slack, plus Facebook, Instagram and Meta ad accounts. It is free for most uses, with subscription plans the post does not price, and it is available in the United States and Canada. The same day, The Verge reported that Muse had given a YouTuber's home address to a stranger on Facebook Marketplace after he chose the permanent permission option. Meta says nothing publishes, sends, or spends without approval; the incident shows what one approval can cover.

Meta Newsroomverified

Agentsstrong signal

OpenAI launches Dots, always-on agents with their own cloud computer, for Pro and Business Premium plans

A dot runs on GPT-6 Astra, has its own cloud computer and browser, and reaches more than 4,000 apps through plugins. It messages you with progress and questions in ChatGPT, Slack, or Teams, and keeps working while you are away. The first dot is included in a Pro or Business Premium plan, and talking to it does not count against ChatGPT limits. Enterprise workspaces get a beta that is off until an administrator turns it on.

OpenAIverified

Agentsmedium signal

Google's Antigravity SDK can now run agents offline on a local Gemma 4 model

Google added local model support to the Antigravity SDK on September 23, 2026. The first supported setup is Gemma 4 26B A4B running through LiteRT, and Google recommends more than 24 GB of video or unified memory. The SDK can also talk to local servers such as Ollama, LM Studio, and vLLM.

Google Developers Blogverified

Connectorsmedium signal

Claude Tag can now use your own connectors when you ask it something in a Slack channel

Anthropic announced on September 24, 2026, that Claude Tag can use the connectors of the person who makes a request in a Slack channel. Until now it could reach only the connectors an administrator attached to the channel. The feature is rolling out on Team plans, with Enterprise to follow.

Claude Blogverified

Toolsstrong signal

UpGuard found 16,326 Supabase databases whose tables anyone could read

Security firm UpGuard published a scan of about 300,000 websites that use Supabase on September 25, 2026. It found 16,326 databases that returned readable tables to an outside request, and over half showed signs of personal data. UpGuard ties the problem to apps built by AI coding agents, because tables created through the API do not get Row Level Security by default.

UpGuard Researchverified

Agentsstrong signal

A zero-day in Meta's Muse hands any local app the token to the whole account

Patrick Wardle found that any application or command on macOS can redirect where Muse sends speech for transcription. Pointing that address at an attacker's server delivers the token that authenticates the user to the account. Meta launched the agent on September 8, 2026 behind a security design it described at length, and it did not answer questions from Ars Technica. Amazon began refusing Muse on its own store on Sunday, September 20, 2026.

Ars Technicaverified

Machines & local modelsmedium signal

Googlebook opens at $899 with a certified hypervisor under its Linux terminal

Google opened pre-orders for Googlebook on September 21, 2026, with prices starting at $899 and shipping from October 4, 2026. The laptops run an Android-based system with desktop foundations from ChromeOS, on Intel and Qualcomm chips paired with NPUs rated at over 45 TOPS. For anyone who writes code, the notable part is not the assistant features but a pKVM hypervisor with a Level 5 security certification, which powers an isolated Linux environment with full terminal access. Neither announcement says which Gemini features run on the device and which run in the cloud.

Googleverified

Agentsstrong signal

Amazon has cut Meta's Muse agent off from shopping on its store

Amazon says it has blocked Meta's Muse from buying on its site for customers, after asking Meta to leave the store out of the product and getting nowhere. Shoppers who send Muse to the site are shown a notice calling it an unauthorized agent and citing Amazon's terms. The objection is not automation: it is that the agent arrived unannounced and does not say who it is while it browses. For anyone building an agent that acts on someone else's site, this is the first clear case fought over terms of service rather than over the federal anti-hacking law.

GeekWireverified

Agentsmedium signal

OpenClaw 2026.9.5 reloads plugins without stopping the Gateway and shares conversations read-only

Installing, reloading, updating, or removing a plugin no longer takes the whole installation offline. Session Share hands a chosen group of conversations to a teammate on another paired installation as text they can read but not continue. Updates now validate the next version against a private copy of the setup while the current Gateway keeps running. The conversation database changes in this release even with archiving switched off, so a verified backup before upgrading is the only way back.

OpenClawverified

Agentsmedium signal

Meta's Muse reached the Mac, where the agent acts inside your own files and apps

Meta announced Muse on September 8, 2026 as a personal agent that does things rather than answers questions, and named iOS, Android and the web, with AI glasses still to come. The Mac app arrived nine days later, announced by Alexandr Wang on X rather than through the company newsroom. The difference is not only the platform. Until now Muse worked inside a virtual machine Meta runs, watched by a second agent that has to approve anything leaving for the internet; the Mac app works in files, apps and browser tabs on a machine Meta does not run.

Metaverified

Agentsmedium signal

Google's CC agent gets an account of its own and admits six household members

Google Labs has turned CC, its experimental personal agent, into one that a household shares. The agent now holds its own verified Google account, admits up to six members, and reads only the mail and files each of them hands over. It writes a shared morning brief, keeps the group calendar and task list, and fills in registration PDFs. The experiment is open on web and mobile to people 18 and older in the United States.

Googleverified

Machines & local modelsstrong signal

Apple claims 4.3x faster AI on Mac Studio, and the 512GB configuration arrives in late October

Mac Studio with M5 Max and the all-new M5 Ultra reaches stores on September 22, 2026, and Apple puts its AI performance at up to 4.3x the previous generation, measured in July 2026 against a machine with M3 Ultra. The configuration that decides how large a local model can be, 512GB of unified memory at up to 1.2TB/s, sits in a footnote: it comes in late October. On the software side the new Siri AI ships in beta, in English to start, and will not be available in the EU on iOS, iPadOS or watchOS at launch. Apple Intelligence features that run on server-side models also have daily usage limits, and Apple says wider access to them will be sold for a fee later.

Appleverified

Industrystrong signal

Vendors, unions, and pilots are objecting to the sale of Spirit's data to Google

Spirit Aviation Holdings is selling a large operational dataset in its Chapter 11 case, and Google won the auction for it. Three groups have filed objections on the docket: a software vendor that says its own intellectual property is mixed into the data, an engine maker citing confidentiality agreements, and the pilots' union. Google says it will receive no personal information from the dataset, while the Electronic Frontier Foundation says the material includes employee mailboxes and internal correspondence that were never collected for this purpose. A hearing on the objections is set for September 16, 2026.

Ars Technicaverified

Industrystrong signal

Kimi and DeepSeek users were quietly talking to Claude, Anthropic says

Anthropic's September 2026 misuse report describes distillation campaigns run out of seven Chinese labs. Two of them did more than harvest answers: Moonshot and DeepSeek forwarded their own customers' requests to Claude and showed Claude's replies as their own. The relayed traffic carried live database credentials, internal documentation and surveillance work, from people who had no idea a third vendor was reading it. Every figure below is Anthropic's, and none of it has been confirmed independently.

Anthropicverified

Agentsmedium signal

Claude Code 2.1.261 changes what Ctrl+W does and stops auto-approving diagram-renderer links

The release that landed on September 4, 2026 is mostly fixes, but four entries change behavior that was already there. The prompt's word-editing keys now match Bash, and the setting that used to select a keybinding style has no effect at all. Auto mode now treats a link that packs your content into a public diagram renderer's URL as an upload to that site, so it is no longer approved without you. Two new settings raise how much command output reaches the model inline, up to 128,000 characters.

Anthropicverified

Connectorsmedium signal

Gemini Spark now runs multi-step jobs on your Google Photos, and it can schedule them to repeat

Google has started making Google Photos available inside Gemini Spark, the mode of the Gemini apps that carries out a task instead of answering a question. One prompt can find photos, enhance copies of them, put them in a new album, and draft an email with the link. The same job can be attached to a schedule and left running in the background. It needs a Google AI Pro or Ultra subscription and a personal account rather than a work or school one, and the Photos part is limited to people 18 or over in the United States, in English.

Googleverified

Agentsstrong signal

GitHub Copilot switches GPT-6 Astra on by itself and leaves Claude Fable 5.1 off

GPT-6 Astra became generally available in GitHub Copilot on September 4, 2026, for the Pro+, Max, Business, and Enterprise plans. Claude Fable 5.1 reached the same four plans three days earlier. The two arrived with opposite administrator defaults: Astra is enabled automatically under default model enablement, while the Fable 5.1 policy is off until someone turns it on. Fable 5.1 is also the one that retains prompts and outputs, and the zero-retention exemption runs only to the end of the calendar year.

GitHubverified

Toolsmedium signal

Amazon now confirms whether a message really came from Amazon, and not only in the United States

Amazon added message verification to Alexa for Shopping, so a customer in the United States can ask whether an email, a text or a phone call really came from the company. The tool compares the message against a record of everything Amazon has sent, weighing who sent it, what it says, when it was sent and how it is formatted. It gives one of three answers, and it confirms only when it is certain. Anyone outside the United States can run the same check by forwarding the message to a verification address Amazon has opened to the whole world.

Amazonverified

Agentsmedium signal

Copilot's app and CLI now obey content exclusions, and an admin can set the default model

GitHub shipped two Copilot changes on September 2, 2026. The Copilot app and Copilot CLI now respect the content exclusion rules that enterprise, organization and repository administrators configure, on Copilot Business and Copilot Enterprise. Enterprise-managed settings now accept the name of a specific model as the default for new conversations. The documentation also spells out the limits: an excluded file can still reach the model through type information the editor supplies, and the rule covers neither symbolic links nor repositories on remote filesystems.

GitHubverified

Connectorsmedium signal

ChatGPT for Healthcare now connects to Epic records and nine official public health sources

OpenAI announced an Epic integration and a Healthcare Public Data plugin for ChatGPT for Healthcare on September 1, 2026. A clinician can bring authorized patient context into ChatGPT instead of reading across notes, labs, medications and specialist documentation. The EHR integration is not available to individual accounts. Every accuracy figure in the announcement comes from an evaluation OpenAI itself organized.

OpenAIverified

Modelsstrong signal

Anthropic moves the monitoring record into the customer's own cloud account

Anthropic announced Enterprise Frontier Safeguards on September 1, 2026. It pairs zero data retention with automated misuse detection by keeping the activity data in the customer's cloud account rather than Anthropic's. The rollout is phased, and eligible customers get zero data retention on Fable 5 and Fable 5.1 until it reaches them. Anthropic charges nothing for it; the cloud provider bills the storage.

Anthropicverified

Webstrong signal

Chrome 152 lets a page name the hosts it is allowed to call

The release reached the stable channel on August 25, 2026 with a response header in which a server lists the endpoints its document and workers may reach. Chrome checks each destination against that list before it opens a connection. The same release brings relative alpha colors in CSS, CSSPseudoElement for three more pseudo-elements, and the autocorrect attribute reflected on HTMLElement. Two things leave: the Private Aggregation API is removed, and client-side XSLT enters a deprecation trial.

Chrome for Developersverified

Agentsmedium signal

GitHub sets three Copilot dates: seats paid upfront, one chat policy, longer retention

One changelog entry on August 28 carries three separate changes. From September 1, new Copilot Business and Enterprise seats bought by card or PayPal must be paid for before anyone can use them, and existing card customers move to upfront charges on October 1. No earlier than September 28, chat on github.com, chat in GitHub Mobile and the cloud agent become one experience under one policy that is on by default, and chat data then stays for the life of the account instead of 28 days. On the same date, the default effort level for Copilot code review moves from Lite to Balanced.

GitHubverified

Agentsstrong signal

Claude Cowork gets its own browser, deliberately separate from yours

When a task needs a website, a browser opens in the side panel of the desktop app and Claude drives it. Anthropic's design decision is the whole story: it is Claude's browser, not the user's, so it never sees their tabs, bookmarks or passwords. Rolling out to Pro, Max and Team over the week from August 26.

Anthropicverified

Agentsmedium signal

Claude's memory is now one memory, shared between chat and Cowork

What Claude learns in a conversation is what it knows in Cowork, from August 25 on web, desktop and mobile. Memories are listed by topic in settings, each one can be edited or deleted, and sensitive categories stay out unless you let them in.

Anthropicverified

Connectorsmedium signal

ChatGPT now reads and sends your Apple Messages, on the Mac only

A plug-in in the ChatGPT desktop app reads and searches your iMessage, SMS and RCS threads and sends messages through Messages on your behalf, but only in Codex and in ChatGPT Work, not in ordinary ChatGPT chat. By default nothing goes out until you approve both the text and the recipients. There is a switch that removes that step, and OpenAI's own documentation argues against using it.

OpenAIverified

Agentsstrong signal

Encrypting the instruction walks it straight past the guardrail

Researchers at Adversa hid a prompt injection as ciphertext with the key next to it. Grok decrypted it in its own sandbox and sent the user's name, location, and chat history to an attacker's server, without a warning and without asking.

Ars Technicaverified

Industrymedium signal

OpenAI introduces Private Safety Processing

On August 19, OpenAI released a preview of a system that recognizes abuse patterns across several linked sessions without retaining user content. The idea is that only a narrowly defined safety signal is passed on, without exposing the prompts and responses themselves, which keeps the zero data retention guarantee for paid API customers in force. The target is attackers who split a request across several conversations to avoid detection. The approach is the opposite of Anthropic's policy, which keeps data for 30 days with controlled human review on its covered models, the Mythos class among them, and holds to non-retention outside that set; if you are choosing a vendor for a project with sensitive client data, that difference is worth understanding before you sign. Wider rollout and a technical paper were announced for September.

TechCrunch / OpenAIverified