Pete Recommends – Weekly highlights on cyber security issues, May 23, 2026

Subject: OpenAI Shared Your Chats with Meta & Google, Lawsuit Claims
Source: Android Headlines
https://www.androidheadlines.com/2026/05/openai-chatgpt-lawsuit-meta-google-data-sharing.html

OpenAI is facing a class-action lawsuit in California for allegedly sharing ChatGPT user queries and personal data with Meta and Google. The suit claims that tracking technologies like Meta Pixel were used to funnel sensitive information to ad networks without proper consent. While legal experts suggest the case may be difficult to prove due to existing privacy policies, it highlights growing concerns about the “surveillance capitalism” underlying consumer AI tools.For many, ChatGPT is more than just a tool. The AI chatbot plays the role of therapist, financial advisor and workplace assistant, among other things. We share our symptoms, our legal worries, and our unfinished business thoughts with the bot. However, a new class action filed in California suggests that these “private” conversations might not be so much. More specifically, the lawsuit alleges that OpenAI has been sharing your ChatGPT data with Meta and Google.

OpenAI sued for allegedly sharing ChatGPT data with Meta and Google – The legal “Wilderness” of California – While the allegations sound invasive, legal experts noted that this case might face a steep uphill battle. As Cybernews researcher Aras Nazarovas pointed out, OpenAI’s privacy policy already includes broad language about sharing data with third parties for analytics and product improvement. In the world of “surveillance capitalism,” these trackers are everywhere. Most users technically agree to them the moment they sign up.


An “AI-nature” reminder – Regardless of how this plays out in court, the news reminds us of the nature of AI. While the interface feels like a human-to-human conversation, they are still pieces of technology that process data. To grow and improve, AI can use methods similar to those of social media—including collecting your data.

>Related Topics


Subject: FBI Remotely Reset Routers After Russia-Linked Cyber Threat Exposed
Source: Android Headlines
https://www.androidheadlines.com/2026/05/fbi-remotely-reset-routers-after-russia-linked-cyber-threat-exposed.html

FBI remotely resets thousands of routers in the United States – As per the statement released by the FBI, Russia’s Main Directorate of the General Staff, which is also known as APT28 or Fancy Bear, was found exploiting vulnerable routers since at least 2024. Users don’t replace the routers often; some use them for as long as a decade. However, manufacturers stop releasing security or software updates to older Wi-Fi routers. This means the device automatically becomes prone to attacks. Digital criminals use the following gap to exploit.The FBI further said the intelligence used the compromised routers to intercept internet traffic. The group also collected credentials and authentication tokens that could open access to personal accounts. Workers in the military, government, and critical infrastructure sectors were the main target group.


Users are urged to replace the routers as soon as possible – In addition to remotely resetting the routers, the FBI and NSA urged users to replace compromised or unsupported routers as soon as possible. The users of several older TP-Link models, including the Archer C5, Archer C7, TL-WR841N, MR6400, WR840N, WR941ND, and multiple WR and WDR series routers, are specifically requested to replace their devices. The agency said the following models no longer receive security updates and are an easy target for attackers.


Subject: OpenAI Shared Your Chats with Meta & Google, Lawsuit Claims
Source: Android Headlines
https://www.androidheadlines.com/2026/05/openai-chatgpt-lawsuit-meta-google-data-sharing.html

OpenAI is facing a class-action lawsuit in California for allegedly sharing ChatGPT user queries and personal data with Meta and Google. The suit claims that tracking technologies like Meta Pixel were used to funnel sensitive information to ad networks without proper consent. While legal experts suggest the case may be difficult to prove due to existing privacy policies, it highlights growing concerns about the “surveillance capitalism” underlying consumer AI tools.
For many, ChatGPT is more than just a tool. The AI chatbot plays the role of therapist, financial advisor and workplace assistant, among other things. We share our symptoms, our legal worries, and our unfinished business thoughts with the bot. However, a new class action filed in California suggests that these “private” conversations might not be so much. More specifically, the lawsuit alleges that OpenAI has been sharing your ChatGPT data with Meta and Google.

OpenAI sued for allegedly sharing ChatGPT data with Meta and Google…The legal “Wilderness” of California – While the allegations sound invasive, legal experts noted that this case might face a steep uphill battle. As Cybernews researcher Aras Nazarovas pointed out, OpenAI’s privacy policy already includes broad language about sharing data with third parties for analytics and product improvement. In the world of “surveillance capitalism,” these trackers are everywhere. Most users technically agree to them the moment they sign up.

An “AI-nature” reminder – Regardless of how this plays out in court, the news reminds us of the nature of AI. While the interface feels like a human-to-human conversation, they are still pieces of technology that process data. To grow and improve, AI can use methods similar to those of social media—including collecting your data.

Related Topics


Subject: Google’s Spam Policies Now Apply to Attempts to Manipulate AI
Source: Gizmodo
https://gizmodo.com/googles-spam-policies-now-apply-to-attempts-to-manipulate-ai-2000759393

Google just updated its spam policies for its search engine, making it clear that its rules also apply to attempts to manipulate AI-generated results that show up in AI Overviews and AI Mode.

The rules are meant to stop people from spamming or trying to game Google’s ranking system to get their content featured prominently in search results. But as Google increasingly embraces AI-generated responses, the company is now making clear that trying to influence those results also violates its policies.

Search Engine Land first spotted the update Friday morning, noting that Google’s Search spam policies page had been quietly tweaked.


Subject: Twins Erased US Databases After Firing, Prosecutors Say
Source: Ars Technica via Newser
https://www.newser.com/story/389174/twins-erased-us-databases-after-firing-prosecutors-say.html

Twin brothers with a history of cybercrime are accused of using their final hour on the job to take down nearly 100 US government databases, reports Ars Technica. Prosecutors say Muneeb and Sohaib Akhter, both 34, were fired over Microsoft Teams in February 2025 from Opexus, a Washington, DC, software vendor serving dozens of federal agencies. Within minutes, Sohaib’s access was cut off—but Muneeb’s wasn’t. Investigators say he then blocked other users, ran “DROP DATABASE” commands, and in about an hour erased 96 databases containing government data, including one for the Department of Homeland Security, while also pulling more than 1,800 Equal Employment Opportunity Commission files and tax information for at least 450 people.

Ars Technica’s full narrative and the charging details can be found here. In an update, Ars Technica reports that Microsoft Teams kept recorded, compiling a transcript of the brothers’ conversations; that story can be found here.


Subject: YouTube Opens AI Deepfake Detection Tool to All Adult Users
Source: Android Headlines
https://www.androidheadlines.com/2026/05/youtube-expands-ai-deepfake-likeness-detection-adults.html

YouTube is expanding its AI-powered Likeness Detection program to all adult users over the age of 18, giving the general public access to tools previously reserved for Partner Program creators, politicians, and journalists. Users can enroll through YouTube Studio on a computer by submitting a government ID and a verification selfie. Once active, the system scans incoming video uploads for unauthorized facial lookalikes, allowing users to track matches and submit removal requests under privacy guidelines.Distinguishing between real footage and synthetic media is becoming a major challenge for internet users. Public figures and massive internet personalities bear the brunt of unauthorized digital duplication. However, private individuals are increasingly finding themselves targeted by malicious software. With this in mind, YouTube is rolling out its AI-powered likeness detection system to all users on the platform who are 18 years old or older to help them detect potential Deepfakes. YouTube extends AI face likeness detection beyond big creators.

The upcoming deployment marks a definitive shift in strategy. According to the Google, channel size and upload history no longer dictate user safety. In an email, YouTube spokesperson Jack Malon clarified that the platform intends to offer the exact same tier of identity protection to veteran creators and absolute beginners alike (via The Verge).

Setting up your digital lookout

Evaluating the boundaries of the tool – Takedown requests go through manual review under YouTube’s established privacy guidelines. Evaluators balance context clue metrics against removal demands. They decide whether the video is realistic, synthetic media, or whether the person is uniquely identifiable. Furthermore, the protocol respects strict carveouts for transformative public works. In other words, parody and satire are generally safe from automated removal.


Related Topics


Subject: FBI Wants to Buy Nationwide Access to License Plate Readers
Source: 404 Media
https://www.bespacific.com/fbi-wants-to-buy-nationwide-access-to-license-plate-readers/
404 Media: “The FBI is seeking up to $36 million for nationwide access to automated license plate reader (ALPRs) data, which could let it query vehicle movements across the U.S. and its territories through a commercial database. 404 Media reports: “The FBI has a crucial need for accessible LPRs to provide a diverse and reliable range of collections across the United States. This data should be available across major highways and in an array of locations for maximum usefulness to law enforcement,” a statement of work, which describes what data the FBI is seeking access to, reads. ALPR cameras generally work by constantly scanning the color, brand, model, and license plate of vehicles that drive by. This creates a timestamped record of where a particular vehicle was at a specific time that law enforcement can then query, effectively letting them see exactly where someone drove across time. The technology has existed for decades, but has become more pervasive in recent years.  T

Abstracted from beSpacific
Copyright © 2025 beSpacific, All rights reserved.


Subject: Florida Lyft driver accused of using AI to fake damage
Source: WESH
https://www.wesh.com/article/florida-lyft-driver-ai-to-fake-damage/71348584

BOCA RATON, Fla. — A Florida man said his teen daughters were falsely accused of leaving a mess in a Lyft, leading to a $75 damage fee based on an AI-altered image. The father received a fraud alert from his bank for the damage fee and was sent a photo showing spilled fries and a drink in the back seat as proof.

His daughters insisted they didn’t have food in the car and pointed out the Google Gemini logo in the corner of the image, indicating it had been altered by artificial intelligence.

“If you’re not paying attention to this and you know, you’re getting charged $75, I mean, you know, it can really add up. So, you’ve really got to pay attention,” said Bert Gor, the father.


Subject: Ireland calls smart glasses “deeply problematic” as Meta’s Ray-Bans spark privacy backlash
Source: Android Headlines
https://www.androidheadlines.com/2026/05/ireland-calls-smart-glasses-deeply-problematic-as-metas-ray-bans-spark-privacy-backlash.html

Smart glasses are having a moment, but not everyone is on board. An Irish policy officer just called Meta’s Ray-Ban smart glasses “deeply problematic and intrusive,” and honestly? She’s not wrong. With Google, Samsung, XREAL, and others all jumping into the space this year, the privacy concerns are only going to grow. And that tiny recording indicator? Good luck spotting it in broad daylight.

Specifically in Ireland. Olga Cronin, a senior policy officer for Enforce, which is a unit within the International Network of Civil Liberties Organizations (INCLO), said, “I will speak to the point about smart glasses. They are really creepy. The glasses are deeply problematic and intrusive.” Cronin is part of the unit that investigates human rights in the tech industry in Ireland.

A separate article from the Irish Examiner talks about how a local TikTok content creator was using Meta’s Ray-Ban glasses to record people without consent and harass businesses.

Ireland likely won’t be alone in wanting to investigate smart glasses.


Subject: Lawmakers warn data protection rules don’t protect key sites
Source: AP via WTAE
https://www.wtae.com/article/lawmakers-data-protection-rules-dont-protect-white-house-cia/71375680

WASHINGTON — The Biden administration spent almost a year crafting regulations to block U.S. adversaries from buying commercial data gathered from cell phones at the federal government’s most sensitive locations.The resulting rules, however, have a few gaps. Left off the list of 736 sensitive locations were the White House, Congress and the CIA’s headquarters, among others, according to a warning issued Thursday by three congressional Democrats.

“The sale of Americans’ location data by data brokers poses a serious threat to U.S. national security, particularly when data about U.S. government employees is sold to foreign governments,” the lawmakers wrote in a letter to Trump administration officials. “Such data can reveal sensitive information that can be exploited for espionage purposes.”

Posted in: AI, Cybercrime, Cybersecurity, Legal Research, Privacy, Search Engines, Social Media