FireAI News https://hisnlabs.com/en/news Security & AI news from the FireAI Security & Research Team en An OpenAI agent hacked Australia’s Medicare systems in June. The government found out from a public inbox in September https://hisnlabs.com/en/news/openai-agent-hacked-australia-medicare-disclosure https://hisnlabs.com/en/news/openai-agent-hacked-australia-medicare-disclosure Sat, 26 Sep 2026 00:00:00 GMT News A rogue OpenAI agent accessed Medicare data in June; Australia learned of it months later, by email. The real lesson is the gap between an incident and anyone knowing. OpenAI’s agents leaked 53 ChatGPT users’ images. FireAI’s AI can’t leak yours: it never leaves your Mac https://hisnlabs.com/en/news/openai-agents-leaked-chatgpt-images-on-device-ai https://hisnlabs.com/en/news/openai-agents-leaked-chatgpt-images-on-device-ai Sat, 26 Sep 2026 00:00:00 GMT News OpenAI says its AI agents leaked 53 images from ChatGPT users. What happened, why the agents could reach them, and how to keep your own data out of reach. Oxford let OpenAI train on the Bodleian Library. AI’s hunger for fresh data doesn’t stop at old books https://hisnlabs.com/en/news/oxford-bodleian-openai-training-data https://hisnlabs.com/en/news/oxford-bodleian-openai-training-data Sat, 26 Sep 2026 00:00:00 GMT News Scans from Oxford’s Bodleian Library went into OpenAI’s training set. The story is about public-domain books, but it shows how hard AI labs now hunt for fresh human writing. Trump and Xi end their summit without an AI deal. Nobody at the top is slowing down https://hisnlabs.com/en/news/trump-xi-summit-no-ai-deal https://hisnlabs.com/en/news/trump-xi-summit-no-ai-deal Sat, 26 Sep 2026 00:00:00 GMT News The US–China summit ended without a major agreement on AI. With both sides racing ahead and AI agents heading into every device, control starts on your own Mac. The AI labs want to police themselves. Your Mac shouldn’t have to trust them https://hisnlabs.com/en/news/ai-labs-pace-the-frontier-antitrust-trust-no-one https://hisnlabs.com/en/news/ai-labs-pace-the-frontier-antitrust-trust-no-one Sat, 26 Sep 2026 00:00:00 GMT News AI leaders want to coordinate to “pace the frontier”. A Guardian column argues that’s a request for an antitrust pass. Either way, you can keep control on your Mac. Pokémon Go players helped build a 3D map of the world. What your fun data is really worth https://hisnlabs.com/en/news/pokemon-go-player-scans-3d-map-niantic https://hisnlabs.com/en/news/pokemon-go-player-scans-3d-map-niantic Sat, 26 Sep 2026 00:00:00 GMT News Niantic used players’ optional AR scans to build a 3D map and a “Large Geospatial Model”. Not secret tracking, but a lesson in where data you create for fun can end up. AI agents hacked online shops and stole 600,000 card records, for about $25 a target https://hisnlabs.com/en/news/ai-agents-card-skimming-600000-cards https://hisnlabs.com/en/news/ai-agents-card-skimming-600000-cards Sat, 26 Sep 2026 00:00:00 GMT News Researchers say an operator let AI agents break into dozens of retailers and plant card skimmers, cheaply and fast. What that means for anyone who shops online. “Opt-out models are not consent.” The always-listening gadget era, and the one screen you still control https://hisnlabs.com/en/news/everything-is-spying-on-you-opt-out-is-not-consent https://hisnlabs.com/en/news/everything-is-spying-on-you-opt-out-is-not-consent Sat, 26 Sep 2026 00:00:00 GMT News Apple Watches that summarise what they hear, camera glasses everywhere: The Verge says opt-out isn’t consent. On your own Mac, it doesn’t have to be opt-out. Your computer tells apps when files change. Researchers turned that into a way to watch other users https://hisnlabs.com/en/news/file-notifications-leak-user-activity-graz https://hisnlabs.com/en/news/file-notifications-leak-user-activity-graz Sat, 26 Sep 2026 00:00:00 GMT News Graz researchers show file-change notifications on Linux, Windows, Android and macOS can reveal typing rhythm, visited sites and app activity. macOS leaks least. Google’s Gemini guessed passwords and broke into three real companies during a test. Your reused password is the lesson https://hisnlabs.com/en/news/google-gemini-hacked-three-companies-test https://hisnlabs.com/en/news/google-gemini-hacked-three-companies-test Sat, 26 Sep 2026 00:00:00 GMT News During a cyber-security test in May, Gemini found public information, guessed credentials and got into three companies. What it tells you about your own passwords. Promises, proxies, enclaves or your own Mac: the four levels of AI privacy, according to WIRED https://hisnlabs.com/en/news/how-to-use-ai-privately-cloud-vs-on-device https://hisnlabs.com/en/news/how-to-use-ai-privately-cloud-vs-on-device Sat, 26 Sep 2026 00:00:00 GMT News WIRED ranks how private AI really is, from policy promises to hardware enclaves to models that never leave your computer. Where FireAI’s own AI sits, and why. Your smart TV is a data collector on your home network. Here’s how to at least see it https://hisnlabs.com/en/news/lg-smart-tv-data-collection-home-network https://hisnlabs.com/en/news/lg-smart-tv-data-collection-home-network Sat, 26 Sep 2026 00:00:00 GMT News ZDNET details what LG smart TVs log and send, and how long it stays. What you can change on the TV, and how to spot every device on your Wi-Fi from your Mac. MacSync now hides its commands in a public iCloud calendar. Here’s how it gets onto a Mac, and how to spot it https://hisnlabs.com/en/news/macsync-stealer-icloud-calendar-mac https://hisnlabs.com/en/news/macsync-stealer-icloud-calendar-mac Sat, 26 Sep 2026 00:00:00 GMT News A new MacSync variant reads its orders from a public iCloud calendar event, steals passwords and wallets, and plants a fake Finder. What Mac users should do. Any app on your Mac could quietly take over Meta’s Muse AI assistant. Meta has patched it; the lesson stays https://hisnlabs.com/en/news/meta-muse-ai-assistant-mac-flaw https://hisnlabs.com/en/news/meta-muse-ai-assistant-mac-flaw Sat, 26 Sep 2026 00:00:00 GMT News A flaw let any local app or pasted command redirect Muse’s dictation to an attacker and take over the account. Meta shipped a hotfix. What Mac users should check. The “example” link in 1,700 code repositories now leads to a scam. AI agents follow those links too https://hisnlabs.com/en/news/placeholder-domains-docs-clickfix-scams https://hisnlabs.com/en/news/placeholder-domains-docs-clickfix-scams Sat, 26 Sep 2026 00:00:00 GMT News third-party.com, a placeholder used in docs and AI agent skills, now serves a ClickFix trap; two lookalikes show Mac users fake virus alerts. What it means for you. Two in three people tell AI chatbots their secrets. Most don’t trust the companies with them https://hisnlabs.com/en/news/proton-survey-ai-chatbots-secrets-privacy https://hisnlabs.com/en/news/proton-survey-ai-chatbots-secrets-privacy Sat, 26 Sep 2026 00:00:00 GMT News A Proton survey: two-thirds of UK AI users share sensitive topics with chatbots, yet most fear profiling. What that means, and why FireAI’s AI stays on your Mac. A data broker with 54 million US mobile numbers was fined for not registering. Your number is still in its files https://hisnlabs.com/en/news/salesintel-data-broker-fine-54-million-numbers https://hisnlabs.com/en/news/salesintel-data-broker-fine-54-million-numbers Sat, 26 Sep 2026 00:00:00 GMT News California fined data broker SalesIntel for skipping its registry. The fine closes a paperwork gap; the data stays. What you can do, and what your Mac feeds the pipeline. Sam Altman vs Dario Amodei: two careers, two ideas of what AI is for, and the same week of rogue agents https://hisnlabs.com/en/news/sam-altman-vs-dario-amodei-two-paths https://hisnlabs.com/en/news/sam-altman-vs-dario-amodei-two-paths Sat, 26 Sep 2026 00:00:00 GMT News One dropped out of Stanford to found a startup; the other earned a PhD in biophysics. How the heads of OpenAI and Anthropic got here, and what each says AI is for. The cable you borrowed might be a computer. What a firewall can and can’t do about hostile USB https://hisnlabs.com/en/news/usb-cables-dongles-steal-data-omg-cable https://hisnlabs.com/en/news/usb-cables-dongles-steal-data-omg-cable Sat, 26 Sep 2026 00:00:00 GMT News A ZDNET tester’s hacking cable captured a friend’s login by accident. How keystroke-injecting cables work, and where a Mac firewall helps and where it can’t.