Subject: America’s CFPB bins proposed data broker crackdown
Source: The Register
https://www.theregister.com/2025/05/16/cfpb_data_broker/
Uncle Sam’s consumer watchdog has scrapped plans to implement Biden-era rules that would’ve treated certain data brokers as credit bureaus, forcing them to follow stricter laws when flogging Americans’ sensitive data. The Consumer Financial Protection Bureau (CFPB) proposed the rules in December following a string of high-profile scandals that shed light on the massive amounts of personal data being stored and sold off, in some cases to criminals and scammers.
The rules would have reclassified certain data brokers as “consumer reporting agencies,” meaning they’d be subject to strict requirements for accuracy and transparency, and only allowed to sell data for recognized purposes such as credit checks or employment screening. And no, marketing doesn’t count.
Now? Well, never mind. “The Consumer Financial Protection Bureau is withdrawing its Notice of Proposed Rule: Protecting Americans from Harmful Data Broker Practices (Regulation V),” the agency said in an official filing.
“The reason so many apps are so grabby is that data brokers effectively have an all-comers-welcome open offer for data they generate,” author and activist Cory Doctorow told The Register. “In other words, any data you can steal from a user will be bought by a data broker, so it’s always worthwhile to grab any data you can.”
…
Source: CBS Pittsburgh
https://www.cbsnews.com/pittsburgh/news/social-security-declares-philadelphia-woman-dead/
For more than six months, Renee Williams has been battling to get her life back on track after a Social Security error declared her dead.Last fall, the West Philadelphia woman lost access to her bank accounts, health insurance and retirement benefits after being mistakenly placed on the Social Security Administration’s “Death Master File.” Williams turned to CBS News Philadelphia for help.
In the time since, reversing the domino effect the error had on her finances has been never-wracking and seemingly never-ending, Williams said.
“I go to sleep at night and think about if they’re going to cut me off again, not knowing day-to-day what’s going to happen to my benefits,” she said.
“Really serious problem” – A local attorney is now bringing a class action lawsuit against the Social Security Administration for a mistake we’ve uncovered that impacts thousands of Americans each year.
The Social Security Administration maintains its records are “highly accurate,” and that of the more than three million deaths reported each year, “less than one-third of one percent” need to be corrected.
Still, it means nearly 10,000 Americans are wrongly declared dead each year.
If a person suspects they have been incorrectly listed as deceased on their Social Security record, they should contact their local Social Security office as soon as possible, according to the agency’s website. You can locate your nearest Social Security office here.
Source: The Hill
https://thehill.com/opinion/technology/5304169-worldcoin-biometric-privacy-threats/
Sam Altman is best known as the founder of OpenAI. Although ChatGPT made him a household name, another of his ventures, Worldcoin, may prove even more consequential — and far more dangerous.
Unlike AI, whose long-term risks remain mostly theoretical, Worldcoin is already physical, operational and quietly embedding itself into the infrastructure of daily life. In the name of financial inclusion, it lays the foundation for a biometric economy — one where the right to transact, travel, communicate or even date is conditioned on proving who you are.
And proving it not with a name, not with a password, but with your biology.
Worldcoin has launched in six major U.S. cities, including Los Angeles, Miami, Atlanta and Austin. It is piloting a partnership with Tinder in Japan, merging biometric identity verification with digital intimacy.
This is not some fringe crypto experiment. Rather, it is a full-scale identity protocol masquerading as a convenience tool. And it’s targeting soft-entry points: dating apps, ride-sharing services, job platforms and payment systems.
…
We are staring down the barrel of a digital caste system in which economic freedom is algorithmically assigned and biometric proof becomes the price of admission. Those who comply are fast-tracked. Those who don’t are slowed, sidelined or shut out. Access becomes a privilege, not a right, granted by a system that ranks and sorts human beings by their willingness to submit to constant verification.
…
Source: WIRED
https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/
The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.
During a recent cabinet meeting, President Donald Trump’s then national security adviser, Mike Waltz, must have been bored. Apparently unaware of the photographer behind him, he was caught clandestinely checking his Signal messages under the table.
Only he wasn’t using the official Signal app, which is widely considered to be the gold standard of encrypted messaging apps. He was actually using a clone of Signal called TeleMessage Signal, or TM SGNL. This app, made by TeleMessage (which was recently acquired by Smarsh), works in almost exactly the same way as Signal, except that it also archives copies of all the messages passing through it, shattering all of its security guarantees.
Two days after the photo of Waltz was published, an anonymous source told me that they had hacked TeleMessage. “I would say the whole process took about 15 to 20 minutes,” the hacker said, as Joseph Cox and I reported in 404 Media. “It wasn’t much effort at all.” Representatives from TeleMessage and Smarsh did not respond to a request for comment.
[…]
Topics:
Source: Help Net Security
https://www.helpnetsecurity.com/2025/05/19/ai-hallucinations-risk-cybersecurity-operations/
Real world implications – “If a company’s AI agent leverages outdated or inaccurate data, AI hallucinations might fabricate non-existent vulnerabilities or misinterpret threat intelligence, leading to unnecessary alerts or overlooked risks. Such errors can divert resources from genuine threats, creating new vulnerabilities and wasting already-constrained SecOps team resources,” said Harman Kaur, VP of AI at Tanium, told Help Net Security.
One emerging concern is the phenomenon of package hallucinations, where AI models suggest non-existent software packages. This issue has been identified as a potential vector for supply chain attacks, termed “slopsquatting.” Attackers can exploit these hallucinations by creating malicious packages with the suggested names, leading developers to inadvertently incorporate harmful code into their systems.
Another concern is the potential for AI to produce fake threat intelligence. These reports, if taken at face value, can divert attention from actual threats, allowing real vulnerabilities to go unaddressed. The risk is compounded when AI outputs are not cross-verified with reliable sources.
Strategies to mitigate AI hallucinations
“AI hallucinations are an expected byproduct of probabilistic models,” explains Chetan Conikee, CTO at Qwiet AI, emphasizing that the focus shouldn’t be on eliminating them entirely but on minimizing operational disruption. “The CISO’s priority should be limiting operational impact through design, monitoring, and policy.”
By embedding trust, traceability, and control into AI deployment, CISOs can balance innovation with accountability, keeping hallucinations in check without slowing progress:
…
Source: WIRED
https://www.wired.com/story/editor-letter-rogues-issue/
At WIRED, we’ve had a long-running obsession with rogues. This is, after all, a publication that was founded in the early ’90s, born of a desire to champion the subversive, disruptive advent of the internet—and the hackers, hustlers, and blue-sky lunatics consumed by the possibilities of a digitized and interconnected planet.Of course, WIRED had no idea, then, just what those rogues would ultimately unleash: a proliferation of bad actors wreaking havoc across the web; a booming industry of online conspiracy theorists whose dangerous convictions threaten everything from the health of our children to the strength of our democracies; and a coterie of tech billionaires with checkbooks and megaphones that reach from Silicon Valley all the way to the White House. Yes, rogues built the internet and inspired a technological revolution. Now, a mutated and much more powerful version of that same lawless spirit threatens to undo much of the incredible progress that technology and scientific inquiry have unlocked. DOGE Boys: I’m looking at you.
In this edition of WIRED, we’re finding plenty of ways to show you just how roguish, how crooked, and how precarious our world has become.
See: Rogue Nation
