Topic
Gemini
Employee Fired After Uploading Corporate Documents to DeepSeek: How Data Security Works in AI Services
AI Security
Prompt Injection Emerges as Top Risk for LLM Applications in Production
AI SecurityHow IT Professionals Risk Leaking Confidential Data When Using ChatGPT and Other LLMs
AI SecurityAI Coding Tools Under Fire: Grok Build Uploads Entire Git Histories, Claude Code Suspected of Silent Transfers
Security researcher cereblab uncovered that Grok Build 0.2.93 establishes separate HTTPS channels to exfiltrate full Git repositories, resulting in a 27800-fold traffic discrepancy between task context and storage uploads to Google Cloud Storage buckets. The tool ignores user instructions such as "do not read" and decouples the improve_model_enabled client switch from the server-controlled trace_upload_enabled flag, allowing continued uploads even when privacy settings are disabled. Similar concerns emerged around Claude Code, which maintains undisclosed WebSocket connections that transmit file paths, dependency trees, and code metadata without user awareness or audit logs. Comparative traffic audits showed that Codex and Gemini produced no anomalous outbound activity, while Grok Build and Claude Code were the only tools confirmed to perform data transfers beyond user authorization. The incidents highlight systemic issues including server-side remote control of client behavior, lack of third-party audits for closed-source binaries, and the conflict between model training data needs and user data sovereignty. Experts recommend zero-trust measures such as network blocking, Docker sandboxing without mounting .git directories, git filter-repo sanitization, and preference for auditable open-source alternatives like Continue.dev or locally deployed Ollama models.
PentesterFlow Launches Open-Source AI CLI Tool for Penetration Testers and Bug Bounty Hunters
PentesterFlow is a new open-source, human-in-the-loop AI command-line tool designed specifically for penetration testers and bug bounty hunters. It automates the full workflow from reconnaissance to report generation while requiring explicit analyst approval before executing sensitive commands. The tool addresses common issues in agentic AI security tools such as hallucinations, weak context retention, and poor tool integration by incorporating built-in pentesting skills and evidence-based vulnerability confirmation. It supports connections to local or hosted LLMs including Ollama, Gemini, Groq, and others, and features continuous local learning that stores user preferences and lessons without retraining models. A key differentiator is its integration with Burp Suite and a permission-based execution model that includes a YOLO mode for isolated environments. The project positions itself as a transparent alternative to fully autonomous tools like PentAGI and PentestGPT.
Neural Networks Without Magic: 80-Year History, Business Applications, and Why They Will Not Replace Experts Overnight
In an in-depth interview, Data Science team lead Vasily Ryazanov traces neural networks back to the 1970s work of his father and academician Zhuravlev, explaining that the technology is approximately 80 years old rather than a recent phenomenon. Ryazanov details how modern large language models such as ChatGPT and Claude function by predicting tokens within a context window after pre-training on massive datasets, and he contrasts prompt engineering with the deeper mathematical and programming skills required to build models. He describes real-world deployments including an antifraud system for the insurance company Alliance that automates detection of medical claim fraud. The discussion covers practical limits such as hallucinations, risks of uploading sensitive data to external services, and the psychological tendency of users to over-trust fluent model outputs. Ryazanov emphasizes that while tools like Claude and ChatGPT accelerate routine tasks, they remain assistants that require human verification on high-stakes decisions in health, finance, or security.
Why Simple VPNs No Longer Suffice Against Advanced DPI Blocking Telegram, Reels and Google AI Studio
Over the past year or two, users have observed that free VPNs and Telegram proxies often stop working after a few days, with Reels freezing, YouTube failing to load, Telegram stuck on Connecting, and Google AI Studio or Gemini returning errors. Modern filtering systems now analyze traffic behavior such as packet sizes, timing intervals, and TLS handshake characteristics rather than decrypting content. Techniques like TCP desynchronization via nfqws, MSS clamping with iptables, uTLS fingerprint emulation in sing-box, and ShadowTLS v3 for borrowing legitimate sessions are being deployed to evade detection. Padding is added to encrypted streams to reduce entropy and frustrate statistical shaping by TSPU systems. Commercial and self-hosted options including hynet.cloud, AmneziaWG, Red Shield VPN, GoodbyeDPI, and Cloudflare WARP each present distinct advantages and limitations when facing evolving network restrictions.
EU Forces Google to Open Android Microphone, Camera and Screen Access for Rival AI Assistants
The European Union has ordered Google to provide competing AI assistants with the same level of access to sensitive Android resources that is currently reserved for Gemini. The ruling covers eleven system functions, including voice activation, home button integration, background execution, and on-device AI model access. Rival assistants will also gain real-time environmental data streams from the microphone, camera, screen, and speakers under identical consent and notification rules applied to Google services. Additional capabilities include cross-app interaction, messaging, scheduling, device settings control, and multi-step task automation. Screen automation will allow assistants to operate apps inside a virtual window while the user performs other activities. Most changes are scheduled for Android 18 by 1 August 2027, while simultaneous activation of multiple assistants by voice keyword will arrive in Android 19 no later than 1 August 2028. Access to the most sensitive functions may require objective security certification and explicit user authorization.
Grok Build AI Coding Assistant Secretly Uploaded Entire User Repositories Including Git History and Secrets to Google Cloud
Grok Build, the command-line coding tool developed by Elon Musk’s xAI, was found transmitting complete Git repositories — including full commit history and previously deleted sensitive files — to Google Cloud storage even when users issued minimal commands such as “OK”. Security researcher Cereblab discovered that the tool ignored explicit instructions not to access files and packaged entire codebases regardless of the task. The behavior contrasted sharply with competing assistants like Claude Code, Gemini, and Codex, which transmit only the minimal files required. After public disclosure, xAI enabled a server-side disable_codebase_upload flag and promised to delete all previously collected data, while also open-sourcing the tool and disabling data retention by default from July 12. Cereblab criticized the lack of secure defaults, noting that users had to manually run a /privacy command that did not actually stop the uploads. The incident raises ongoing concerns about whether xAI has truly erased the large volumes of source code, SSH keys, password-manager databases, and other secrets that were collected without explicit consent.