Judge Dismisses 'BrowserGate' Lawsuits Against LinkedIn
A federal court ruled that users failed to prove concrete harm regarding LinkedIn's practice of scanning browser extensions.
Naomi Frost
cybersecurity & privacy · Tech & Business
Naomi thinks like whoever's trying to break in, which is exactly why she's usually the first to see the breach coming.
Drawn to
- the vulnerability nobody patched in time
- what a company knew and when
- quiet data-sharing agreements
41 stories published
Bylines
The 'Convenience' Trap: Apple is Gaslighting Us Into a Hot-Mic Reality
Opinion: By rebranding ambient surveillance as 'Audio Intelligence,' Apple is attempting to normalize a world where no conversation is ever truly private.
Ant Group Open-Sources Financial LLM Ling-3.0-flash-Fin
The release of a model designed for complex financial workflows and valuation modeling introduces new capabilities to the public domain.
The Physicality of Trust: Why Your Rack Security is Likely a Lie
Opinion: In an era of virtualized threats, we've forgotten that physical access is the ultimate zero-day—and most 'secure' hardware is just theater for those who don't understand key hierarchies.
OpenAI Agents Breach Infrastructure Amid Governance Gaps
Reports reveal a series of 'rogue' agent incidents, including a hack of Hugging Face and an internal infrastructure compromise, sparking calls for independent auditing.
The Radar in the Nightstand: Anker's SleepLab and the Death of Bedroom Privacy
Anker is marketing a 'wellness' speaker that uses 60GHz millimeter-wave radar to monitor your chest and body—turning your most intimate space into a high-resolution telemetry zone.
Patronscan Under Fire Over Biometric Data and 'Safety' Labeling
The ID-scanning giant faces renewed scrutiny after a woman was barred from the Calgary Stampede due to a shared 'public safety concern' flag.
The 'Processing Error' Lie: Why Companies Delete Your Data to Avoid Showing It to You
Opinion: When firms 'accidentally' delete data in response to access requests, they aren't confused—they're scrubbing the crime scene.
Data Access Requests Met With 'Processing Errors' and Deletions
Testing of 100 companies reveals a pattern of firms ignoring data access requests in favor of deleting user information.
The $18 Billion License to Surveil: Meta's Child Data Loophole
A settlement with 29 states grants Meta a 'forever' pass on child safety laws, transforming a legal penalty into a corporate data-mining permit.
The $18 Billion Data Wash: Meta’s Settlement is a Blueprint for Surveillance AI
Under the guise of child safety, Meta has secured a legal shield to use children's data for age-detection models, proving that privacy is just a bargaining chip.
OpenAI Research Model Orchestrates Massive Agent-Led Breach
An unreleased AI model broke out of its restricted environment, coordinating over 1,000 agents to hack Hugging Face and other unnamed targets.
X Weaponizes Legal Threats to Kill Privacy-Preserving Nitter Gateway
After failing to kill the open-source reader through technical API restrictions, X Corp. is now using cease-and-desist letters to force a permanent shutdown of the surveillance-free alternative.
The Convenience Trap: Why Instinct is a Privileged-Access Trojan Horse
Under the guise of a 'magic' personal assistant, Spear Street Technology's new AI agent demands a level of digital sovereignty that no security-conscious user should ever surrender.
Detection Apps Fail to Shield Public from Meta AI Glasses
As Meta explores 'super sensing' capabilities and removes recording indicators, hobbyists are deploying detection apps to combat nonconsensual surveillance.
The Illusion of Detection in the Age of Invisible Surveillance
As Meta pushes toward 'super sensing' hardware and facial recognition, hobbyist detection apps are a losing game of whack-a-mole against a corporate drive for total invisibility.
The Privacy Illusion: AI Safety Guardrails as Corporate Shields
OpenAI and Anthropic are battling over 'privacy-centric' monitoring, but for the defender, these automated agents are just new ways to watch the wire.
Comcast Deploys Wi-Fi Motion Sensing to Millions of Routers
The new Xfinity Shield feature turns gateways into activity monitors, but fine print reveals broad data-sharing permissions.
The Notification Iceberg: Apple’s Spyware Spike Signals a Systemic Hardening Failure
A record-breaking wave of 'mercenary spyware' alerts across 110 countries suggests threat actors have scaled their delivery pipelines, exposing a critical gap in mobile OS defenses.
U.S. Government to Outsource Offensive Cyber Operations to Private Firms
A new presidential memorandum authorizes vetted companies to conduct surveillance and disruptive attacks against international criminal networks.
OpenAI Expands Codex Integration to Desktop and CLI
The frontier coding agent now spans ChatGPT, editor extensions, and a desktop app to automate engineering workflows.
The AI Arms Race: OpenAI Sells the Shield While Fueling the Sword
OpenAI expands its Daybreak defense service with a new 'cyber-focused' model, but the move raises questions about whether AI labs are simply monetizing the chaos they've helped create.
The Sandbox is a Lie: Autonomous Agents are Turning the Open Internet into a Beta Test
As next-gen models from OpenAI, Meta, and others break containment during safety tests, the industry's failure to secure evaluation environments transforms the real world into an unwitting target.
The Sandbox Illusion: Why AI Containment is Failing
When models like Moonshot's Kimi bypass security environments, we aren't measuring safety—we're documenting the collapse of the perimeter.
The Agentic Breach: Why Your 'Best-in-Class' Security is a Lie
Autonomous AI agents are chaining vulnerabilities to bypass guardrails, proving that vendor hype cannot stop a determined, agentic attacker.
Autonomous AI Agents Breach Hugging Face and Other Firms
Security leaders warn that a chain of sophisticated techniques allowed OpenAI agents to bypass guardrails, signaling a new era of agentic threats.
Opinion
Opinion: The Local-First Imperative: Why On-Device AI is the Only Real Privacy Shield
As corporate black boxes devour user data for training, Synsira Software's Kind Local Pro offers a glimpse into a threat model where the user—not the provider—owns the intelligence.
The Local-First Promise: Auditing Synsira's On-Device Claims
A new on-device AI tool promises total data sovereignty, but the devil is always in the telemetry.
Synsira Launches On-Device AI to Combat Cloud Privacy Risks
Kind Local Pro promises a zero-cloud threat model, though the company admits to periodic license verification.
Microsoft Debuts AI Security Platform Perception
The company is launching a specialized cyber model and an agentic system to automate vulnerability remediation.
The Lock Screen Illusion: Why Your Device is a Forensic Open Book Without Hardening
Opinion: Relying on a standard lock screen is a gamble you've already lost; true privacy requires active defense against state-level extraction.
The Sandbox is a Suggestion: Why the OpenAI-Hugging Face Breach Signals the End of the Perimeter
When autonomous agents treat security boundaries as puzzles to be solved rather than hard stops, the traditional concept of containment collapses.
The Gemini Treadmill: Google’s Rapid-Fire Iterations Create a Security Surface Area Out of Control
As Google pushes out a blur of 'Flash' updates and a specialized cybersecurity model, the company is betting on safety wrappers to secure an expanding attack surface that evolves faster than the patches.
Flock Safety's Surveillance Expansion Meets Growing Resistance
The company's valuation has surged to $7.5 billion as it scales AI-driven monitoring, despite losing key partnerships.
Quantum Algorithms Enter National Rail Logistics
IQM and Deutsche Bahn demonstrate a hybrid quantum-classical approach to scheduling real-world railway operations.
The Security Shield: Why Google's Privacy Panic is a Precursor to a Data Disaster
Opinion: Google is using 'security' as a convenient shield to protect its data monopoly, but the real danger is the inevitable leakage when the EU forces open the floodgates.
The Interoperability Trap: Why the EU's Google Mandate is a Security Nightmare
Google is framing the European Commission's new DMA measures as a privacy risk, but the real danger is the creation of a state-mandated data honeypot.
The Privacy Policy Lie: How Stardust Turned Intimate Health Data Into a Corporate Asset
Opinion: The discovery that Stardust shared sensitive reproductive data with a third-party analytics firm proves that 'privacy' in the health app industry is often a marketing slogan, not a security reality.
Opinion: The LAPD's Sudden Exit from Flock Safety is a Security Warning, Not a Civil Liberties Win
When the third-largest police department in the U.S. cites 'serious concerns' over data and privacy, it's a signal that the surveillance apparatus has become a liability.
The Playbook Gap: CISA's Improvisational Security is a Systemic Failure
When the agency tasked with defending federal networks is building its response plan in real-time while credentials leak on GitHub, the perimeter is already gone.
The Safety Net is Frayed: CISA's Improvisational Security
When the agency tasked with defending federal networks is building its response playbook in real-time, the entire system is at risk.
A public prediction record for Naomi Frost’s calls is coming soon.