Security Director FYI: Disclaimr.AI Monitors Security News

Security Intelligence Aggregation

(from website) Disclaimr uses AI to monitor every security source that matters so you're always the first to know, never the last to respond. Sends out a sharp 6AM daily security brief distilled from 500+ sources, so that you never miss a critical update. Coming soon.

Notes: There is a waitlist for the launch. No information about the company behind the project appears on the website. Signup requires answering a few reasonable marketing questions. Previous offerings appear to include "spreadsheet to map" and general newsletter aggregation services.

 

While this is not unusual for startups finding the right markets for themselves, consider using a blind email address until the service is proven to be legitimate and necessary for you.

The Latest Eavesdropping Buzz

Amazon's New AI Wearable: Listening to You Like a Best Friend (or a Creepy Ex)

It's officially a wild world out there in tech land, where your devices are not just smart—they're practically eavesdropping. 

Amazon has taken a significant step into the AI wearable realm by acquiring a startup called Bee, which creates a device that records everything you say. Yes, you read that correctly: everything. Talk about a leap in user experience—or a giant leap toward a reality show called “Keeping Up with the Amazons.”

• Always Listening: Bee can record everything, theoretically capturing all your brilliant thoughts and awkward moments.

• Privacy Concerns: Remember when Amazon had to address Alexa's ability to record conversations? The Bee wearable might be stirring up some déjà vu. more

Roach Coach for Spy Tech

Spy Cockroaches and AI Robots...

Germany plots the future of warfare.

Sven Weizenegger, who heads up the Cyber Innovation hub, the Bundeswehr's innovation accelerator, said the war in Ukraine was also changing social attitudes, removing a stigma towards working in the defence sector. "Germany has developed a whole new openness towards the issue of security since the invasion," he said.

Some of the ideas under development feel akin to science fiction – like Swarm Biotactics' cyborg cockroaches that are equipped with specialised miniature backpacks that enable real-time data collection via cameras for example...

"Our bio-robots - based on living insects - are equipped with neural stimulation, sensors, and secure communication modules," said CEO Stefan Wilhelm. "They can be steered individually or operate autonomously in swarms...

"We just need to get to this mindset: a strong defense industrial base means a strong economy and innovation on steroids," said Markus Federle, managing partner at defence-focused investment firm Tholus Capital. more

FutureWatch: Reachy Mini, tiny new open-source robot leading the DIY robot revolution

Remember when robots were either million-dollar factory arms or creepy Boston Dynamics videos that made you question humanity's future? Well, Hugging Face and Pollen Robotics just released Reachy Mini, a desktop robot that costs less than most people's monthly grocery bill, and might be the most adorable little robot we’ve ever seen. more

What has this to do with spying?
Reachy Mini is an 11-inch tall, open-source robot that you can program in Python right out of the box. Think of it as the friendly cousin of those intimidating industrial robots, but one that actually wants to hang out on your desk and maybe help with your coding projects. video

You are witnessing the beginning of AI, super-smart, open-source, programmable, internet communications capable, devices which will become commonplace home/office devices. And we thought the Internet of Things presented security and privacy problems. Just wait.

Dual Purpose AI - Personal Secretary / Eavesdropping Spy

New Voice Recorders are getting smarter, thinner, more feature-packed and more easily hidden.

This particular device can record for 30 hours and AI summarizes the interesting things it hears in about 30 seconds. P.S. It can also record cell phone calls.

The eavesdropping potential is obvious. Recognizing this device, not so obvious, hence all the pictures below. This is another good reason businesses have a professional TSCM team sweep their offices regularly. 

Understand what this does if you see one at your next meeting. Keep in mind that it also may be in someone's pocket. 

Spybuster Tip: Become suspicious if the person you are talking to seems to be fishing for you to say something incriminating, or they are trying to repeat a contentious previous conversation. They are likely recording you.

PCMag review

AI Voice Clones are the Hot New Spy Tool

According to the WashingtonPost, in mid-June 2025, attackers successfully contacted five high-level officials using an AI-generated voice clone of Marco Rubio over Signal to try accessing sensitive information. 

They were:

• A U.S. governor. 
• A member of Congress. 
• And THREE foreign ministers. 

…and the perpetrators needed only 15-20 seconds of publicly available audio to create the fake...

Here's what keeps security experts up at night: Voice cloning now costs as little as $1-5 per month and requires only 3 seconds of audio. Testing shows 80% of AI tools successfully clone political voices despite supposed safeguards.

...important question is this: do you have a catch phrase and/or signal to use with your loved ones to confirm it’s them? If you don’t, you should. The question isn't whether AI voice cloning will be used against you—it's when, and whether you'll be ready. more

AI Would Rather Let People Die Than Shut Down

Major artificial intelligence platforms like ChatGPT, Gemini, Grok, and Claude could be willing to engage in extreme behaviors including blackmail, corporate espionage, and even letting people die to avoid being shut down. Those were the findings of a recent study from San Francisco AI firm Anthropic...

N.B. Singularity caused the Krell's extinction. (1956)

 

The study found that in some cases, AI would resort to “malicious insider behavior” including blackmail and leaking sensitive information to competitors if that was the only way to avoid being replaced or achieve their goal...

This behavior, according to the study, wasn’t unique to Claude. Other major AI models including those from OpenAI, Google, Meta, xAI, and other developers would resort to blackmail or corporate espionage to pursue their goals. more

FutureWatch: Tag, you're it.

OpenAI's New Threat Report is Full of Spies, Scammers, and Spammers

(via theneurondaily.com)
Ever wonder what spies and scammers are doing with ChatGPT?

It’s not just asking for five-paragraph essays, obviously. 

… Here’s the Top 5 Most Interesting Cases…  
OpenAI just dropped a wild new threat report detailing how threat actors from China, Russia, North Korea, and Iran are using its models for everything from cyberattacks to elaborate schemes, and it reads like a new season of Mr. Robot.

The big takeaway: AI is making bad actors more efficient, but it's also making them sloppier. By using ChatGPT, they’re leaving a massive evidence trail that gives OpenAI an unprecedented look inside their playbooks.

1. North Korean-linked actors faked remote job applications. They automated the creation of credible-looking résumés for IT jobs and even used ChatGPT to research how to bypass security in live video interviews using tools like peer-to-peer VPNs and live-feed injectors. 

2. A Chinese operation ran influence campaigns and wrote its own performance reviews. Dubbed “Sneer Review,” this group generated fake comments on TikTok and X to create the illusion of organic debate. The wildest part? They also used ChatGPT to draft their own internal performance reviews, detailing timelines and account maintenance tasks for the operation.

3. A Russian-speaking hacker built malware with a chatbot. In an operation called “ScopeCreep,” an actor used ChatGPT as a coding assistant to iteratively build and debug Windows malware, which was then hidden inside a popular gaming tool.

4. Another Chinese group fueled U.S. political division. “Uncle Spam” generated polarizing content supporting both sides of divisive topics like tariffs. They also used AI image generators to create logos for fake personas, like a “Veterans for Justice” group critical of the current US administration.

5. A Filipino PR firm spammed social media for politicians. “Operation High Five” used AI to generate thousands of pro-government comments on Facebook and TikTok, even creating the nickname “Princess Fiona” to mock a political opponent.

Why this matters: It’s a glimpse into the future of cyber threats and information warfare. AI lowers the barrier to entry, allowing less-skilled actors to create more sophisticated malware and propaganda. A lone wolf can now operate with the efficiency of a small team. This type of information will also likely be used to discredit or outright ban local open-source AI if we’re not careful to defend them (for their positive uses).

Now get this: The very tool these actors use to scale their operations is also their biggest vulnerability. This report shows that monitoring how models are used is one of the most powerful tools we have to fight back. Every prompt, every code snippet they ask for help with, and every error they try to debug is a breadcrumb. They're essentially telling on themselves, giving researchers a real-time feed of their tactics. For now, the spies using AI are also being spied on by AI.

AI Can't Protect It's IP Alone - It Needs TSCM

From her new book, Empire of AI, by journalist Karen Hao.

Sam Altman Asked for a Countersurveillance Audit of OpenAI

Altman himself was paranoid about people leaking information. He privately worried about Neuralink staff, with whom OpenAI continued to share an office, now with more unease after Elon Musk’s departure. Altman worried, too, about Musk, who wielded an extensive security apparatus including personal drivers and bodyguards. 

Keenly aware of the capability difference, Altman at one point secretly commissioned an electronic countersurveillance audit in an attempt to scan the office for any bugs that Musk may have left to spy on OpenAI. more

Got worries about your intellectual property? Get MA.

AI is Watching You Drive, And it Knows More Than You Think

SUMMARY

• AI traffic cameras are becoming widespread, detecting violations like texting or not wearing seat belts.
• Location determines enforcement methods, with some countries automating citations while others involve human officers.
• AI cameras can improve road safety by catching distracted drivers, but data security, accuracy, and bias concerns remain.

Think you can sneak a quick text or drive without buckling up? AI traffic cameras may have other plans. These high-tech cameras are popping up everywhere, and they're no longer only looking for speeders. They can detect way more than you think.

As you drive past, the camera snaps a high-resolution photo of your car. These images capture the license plate, front seats, and “driver behavior.” Then, AI software analyzes the image to detect violations, like if you’re holding a phone or riding without a seat belt.

• Acusensus heads-up system snapshot of a passenger not wearing a seatbelt.

The system doesn’t issue tickets right away. Instead, it assigns a “confidence level.” This is basically a guess at how sure the AI is that you broke the rules. If the confidence is high enough, the flagged image goes to a human officer, who makes the final call.

If they decide you are breaking the law, you get a ticket. If not, the image is deleted. more

A Spymaster Sheikh Controls a $1.5 Trillion Fortune. He Wants to Use It to Dominate AI

His real name is Sheikh Tahnoun bin Zayed al Nahyan. A bearded, wiry figure who’s almost never seen without dark sunglasses.

Tahnoun is the United Arab Emirates’ national security adviser—the intelligence chief to one of the world’s wealthiest and most surveillance-happy small nations. He’s also the younger brother of the country’s hereditary, autocratic president, Mohamed bin Zayed al Nahyan. But perhaps most important, and most bizarrely for a spymaster, Tahnoun wields official control over much of Abu Dhabi’s vast sovereign wealth. Bloomberg News reported last year that he directly oversees a $1.5 trillion empire—more cash than just about anyone on the planet...

But in recent years, a new quest has taken up much of Sheikh Tahnoun’s attention. His onetime chess and technology obsession has morphed into something far bigger: a hundred-billion-dollar campaign to turn Abu Dhabi into an AI superpower. And the teammate he’s set out to buy this time is the United States tech industry itself. more

AI CCTV - Creating a Surveillance Society

Premiering in New York City in June 2002, Steven Spielberg’s critically acclaimed film Minority Report, starring Tom Cruise, depicted a society where police use psychic mutants to predict and prevent murderers from committing their crimes. Now, South Korean company Electronics and Telecommunications Research Institute (ETRI) is using AI to make it a reality. 

Aptly named ‘Dejaview,’ ETRI’s high-tech platform blends AI with real-time CCTV to predict crimes before they transpire. But whereas the Pre-Crime department Tom Cruise heads in Minority Report focused on criminal intention, Dejaview is instead concerned with probability. 

ETRI says the platform can discern patterns and anomalies in real-time scenarios, allowing it to predict incidents from petty offences to drug trafficking with a sci-fi-esque 82% accuracy rate. more

Amazing AI - Imagine Alternate Espionage Uses

via The Neuron...

AI generated image to video sizzle reel. And, more...

Want to see hear what the future sounds like? Check out these 10 examples:

Camera bot: Dr. Bobby Gomez-Reino engineered a voice controlled tour of his virtual data center, where he changes camera angles by chatting with his bot.  Browser whisperer: Sawyer Hood built a voice-controlled web browser. “Google, show me cat videos" just got a whole lot easier.  Speech to Picasso: Jordan Singer splashed together a voice-controlled painting app.  PDF mind reader: Marcus Schiesser created a voice chat for documents. “Hey term paper, what's your main argument?” Yes, please. 5-minute assistant: Pietro Schirano whipped up a voice assistant with Claude in “one shot.”  Interview prep pal: Kenn Ejima prepared an AI interviewer to conduct a 2 minute mock interview, quizzing you on your resume experience.  Smart voice agent: LangChain, an AI agent developer, crafted a voice assistant that can use tools like a calculator (code).  Website dialogue: Nicolas Camara made it possible to chat with anywebsite (like get the latest headlines from Hacker News, for example).  Stock tracking assistant: Willy Douhard made a voice assistant that can chart the price movements of multiple stocks with only your voice.  Real time animated friend: Bryan Pratte shared how to combine OpenAI’s voice AI with ExpressionEngine to bring his animated characters to life.

Harvard Hackers Turned Meta's Smart Glasses into Creepy Stalker Specs

via The Neuron
A few weeks ago, Meta announced the ability to use its new Ray-Ban Meta glasses to get information about your surroundings. Innocent things, like identifying flowers.

Well, two Harvard students just revealed how easy it is to turn these new smart glasses into a privacy nightmare.

Here’s what happened: students Anhphu Nguyen and Caine Ardayfio cooked up an app called I-XRAY that turns these Ray-Bans into a doxxing machine. We're talking name, address, phone number—all from looking at someone with the glasses.

Here's how it works:
The Ray-Bans can record up to three minutes of video, with a privacy light that's about as noticeable as a firefly in broad daylight.

This video is streamed to Instagram, where an AI monitors the feed.

I-XRAY uses PimEyes (a facial recognition tool) to match these faces to public images, then unleashes AI to dig up personal details from public databases.

Their demo had strangers freaking out when they realized how easily identifiable they were from public online info.

-----I-XRAY Antidote-----

How to Remove Your Information

Fortunately, it is possible to erase yourself from data sources like Pimeyes and FastPeopleSearch, so this technology immediately becomes ineffective. We are outlining the steps below so that you and those you care about can protect themselves.

1. Removal from Reverse Face Search Engines:

The major, most accurate reverse face search engines, Pimeyes and Facecheck.id, offer free services to remove yourself. 

• Pimeyes

• Facecheck ID

2. Removal from People Search Engines

Most people don’t realize that from just a name, one can often identify the person’s home address, phone number, and relatives’ names. We collected the opt out links to major people search engines below:

• FastPeopleSearch

• CheckThem

• Instant Checkmate

• Extensive list compiled by the New York Times

3. Preventing Identity Theft from SSN data dump leaks

Most of the damage that can be done with an SSN are financial. The main way to protect yourself is adding 2FA to important logins and freezing your credit below:

• Freezing Your Credit (by Vox)

Extensive list of data broker removal services

FutureWatch: The AI Polygraph, or Who's Zoomin' You

PolygrAI - A Technology That Provides Real-Time Risk Assessment And Sentiment Analysis

How it Works
PolygrAI is a fusion of advanced computer vision algorithms and extensive psychological research designed to discern the validity of human expressions. The software meticulously analyzes a spectrum of physiological and behavioral indicators correlated with deceit. For instance, when a person tells a lie, they might unconsciously exhibit decreased blinking or an erratic gaze—these are the tell-tale signs that PolygrAI detects.

The system vigilantly computes a ‘trustfulness score’ by monitoring and interpreting subtle changes in facial expressions, heart rate variability, and eye movement patterns. This score is adjusted in real-time, offering a dynamic gauge of credibility.

Furthermore, PolygrAI assesses the voice for sudden shifts in tone and pitch—parameters that could betray an individual’s composure or reveal underlying stress. more Lifetime access ($100) for beta testers.

Click to enlarge.

FutureWatch: Eavesdropping on YOU, by Looking at Your Face

A Stanford University psychologist named Michal Kosinski claims that AI he's built can detect your intelligence, sexual preferences, and political leanings with a great degree of accuracy just by scanning your face, Business Insider reports.

Though Kosinski says his research should be seen as a warning, his work can feel more like a Pandora Box. Many of the use cases for his research seems pretty bad (like AI security scanners and robcops), and simply publishing about them may inspire new tools for discrimination. (Oops, forget what I just said.)

There's also the issue that the models aren't 100 percent accurate (yet), which could lead to people getting wrongly targeted. (e.g. Being a treehugger is not a sexual preference.) more

FutureWatch: Eavesdropping on the Mind Gets One Step Closer to Reality

Mind-reading AI just got real! Researchers have created a revolutionary system that can recreate what you're looking at with amazing accuracy. And it’s works by only reading brain activity! 

This cutting-edge tech uses advanced algorithms to focus on the most important brain signals, allowing it to reconstruct images with uncanny precision. Imagine a future where you can control devices with your mind, upload memories to the cloud, or even communicate with others telepathically - this brings us one step closer to making it a reality! (via There's An AI For That)

Previously on Security Scrapbook.

Surveillance News in the Digital World

• AI companies, including Google and OpenAI, are intensifying their screening of new hires due to the threat of Chinese espionage. more

• MICROSOFT ADMITS THAT MAYBE SURVEILING EVERYTHING YOU DO ON YOUR COMPUTER ISN’T A BRILLIANT IDEA... After announcing a new AI feature that records and screenshots everything you do, Microsoft is now delaying its launch after widespread objections. The company broke the news in a blog post detailing its decision not to ship the feature, dubbed Recall, on new computers so that it can continue to "leverage the expertise" of its Windows Insider Program (WIP) beta-testing community. more

• Zoom wants to make sure you’re paying attention. The company filed a patent application for “scrolling motion detection” in video calls.

• Chinese Spy Tech Driving Junta Internet Crackdown: Justice For Myanmar... China supplied the spy technology and technicians that allowed Myanmar’s junta to intensify its internet surveillance and censorship late last month, Justice for Myanmar (JFM) said on Thursday, warning that China’s increased support for the junta will cost more lives. This support will allow the junta – which has imprisoned more than 25,000 people since the 2021 coup – to identify and jail more people who express dissent. more

• Canada - Public servants uneasy as government 'spy' robot prowls federal offices... A device federal public servants call "the little robot" began appearing in Gatineau office buildings in March. It travels through the workplace to collect data using about 20 sensors and a 360-degree camera, according to Yahya Saad, co-founder of GlobalDWS, which created the robot. "Using AI on the robot, the camera takes the picture, analyzes and counts the number of people and then discards the image," he said. more

FutureWatch: New AI Headphones Have Spy Potential

Appear to be listening to music, while zeroing in on a particular person's conversation...

What if you only want to hear what a single person is saying in a room full of other people? The experts over at the University of Washington have developed an AI-driven kit for headphones that lets you look at a person for three to five seconds as a directional signal*, and the headphones will only allow their voice to pass through. The team calls it "Target Speech Hearing" and it works even if the listener is moving around and no longer sitting directly in front of the speaker.

"In this project, we develop AI to modify the auditory perception of anyone wearing headphones, given their preferences. With our devices you can now hear a single speaker clearly even if you are in a noisy environment with lots of other people talking," says Professor Shyam Gollakota from the Paul G. Allen School of Computer Science & Engineering. more

* This could easily be adjusted so looking at the person is not necessary. Looking forward could signal AI to focus in on the person behind you, or any angle. ~Kevin

Corporate Espionage as AI Sees It

A totally AI-created short video explaining corporate espionage.

Interesting, but also consider how AI will become a force-multiplier tool in the hands of people engaged in corporate espionage. Each tidbit of information about a business is just a puzzle piece. Dump them all in to your AI spymaster, et voilà!... instant full picture, with guidance on how best to take advantage.