
Japan steps up cyber warnings after 20+ company breaches
Japan told companies and banks to tighten security on October 9, 2026 after 20+ firms reported attacks. Times Car alone leaked about 6.6 million accounts.
Privacy stories where products meet regulators and researchers: license plate camera networks losing state funding after misuse, AI assistants granted broad permissions, and platform settlements that reset defaults for teen accounts. Each story states what data is collected, who can reach it and what changes.

Japan told companies and banks to tighten security on October 9, 2026 after 20+ firms reported attacks. Times Car alone leaked about 6.6 million accounts.

The Philippine Senate voted 16-1 for the SMART KIDS Act, which would bar under-18s from social media. The House version sets a lower age limit of 13.

A researcher published a proof of concept for CVE-2026-107181: one click in Telegram Desktop 7.2.8 or older could steal session files. Update to 7.2.9.

A New York lawsuit alleges TikTok tested a placebo version of its Algo Refresh feature on thousands of users in 2023. TikTok disputes the claims.

Asos confirmed a breach at a third-party platform after an "ASOS HACKED" push alert reached shoppers on October 6. Names and contact details may be exposed.

Google AI Edge Foresight, an experimental Mac app, turns shorthand into meeting notes on-device with Gemma 4 and the 740M-parameter EmbeddingGemma 2.

Healthleap raised $38M for AI that reads hospital records overnight and flags patients at risk of missed conditions such as malnutrition. It runs in 50+ hospitals.

SignSplit left stealth with a $400 million seed deal from W Group at a $1 billion valuation. It pays people to license their data and likeness to AI firms.

OpenAI will test image ads in ChatGPT's image generator later in October in the US, adding measurement partners such as AppsFlyer, Adjust and LiveRamp.

Attackers misused a Danish company's legal access to the CPR register and pulled names, addresses and ID numbers of 8.8 million people in September.

A federal judge ruled a warrantless Flock license plate search broke the Fourth Amendment and threw out 91 pounds of seized meth. It is not binding precedent.

India ordered Jack Dorsey's offline messenger Bitchat off Apple's and Google's stores under Section 69A, months after GitHub was told to remove its code.

Hans Anders stopped selling Ray-Ban Meta glasses in the Netherlands and Belgium on October 2, a day after Wehkamp, as Dutch pressure on them grows.

Apple said on October 2 that Mac apps will need "very explicit user action" to get Full Disk Access, because AI agents make that access riskier.

ChatGPT's new Try On button puts clothes on your selfie using Images 2.5. OpenAI keeps the photo for later and can train on it unless you opt out.

28 of 30 automaker apps sent data to ad or analytics firms in a Northeastern and Consumer Reports test, and 7 sent VINs, names or precise locations.

California Gov. Gavin Newsom vetoed SB-1130, which would have required recording lights on smart glasses and fined secret recording up to $1,500.

A tester who refused Meta's Muse access to Messages found about 187,000 rows of his Mac message history synced anyway. A separate zero-day hit its Mac app.

F-Droid 2.0, its biggest update in 10 years, rewrites the client in Kotlin Compose, needs Android 7.0 and drops the Privileged Extension after 14 test builds.

Claude Code 2.1.277's AGENTS.md support sits behind a remote feature flag, so it silently stops working when telemetry is off, a GitHub issue shows.

A research paper shows SynthID's image watermark carries a 64-bit database-ID field, though Google says it tracks no individual users.
OpenAI's ad pixel sets a one-year __obi cookie linking other sites to a ChatGPT account; scraped identity beat advertiser data 685 to 255.

Meta's Muse agent reached macOS on September 18, 2026, where it can act on files, messages, calendar and notes with per-app permission.

One snapshot reached 313MB and 42,411 files, and 86.6% of it was the .git directory, sent to cloud storage the user cannot decrypt.
One email every Friday with the week's top stories from all six desks: AI, dev tools, coding, the tech industry, startups and what's next. Free, no spam.