Loading story…
Two separate developments highlighted growing security and privacy concerns around consumer AI chatbots as the industry shifts toward ad-driven monetization. Moxie Marlinspike (Signal founder) launched Confer, positioned as an “end-to-end encryption for AI chats” tool intended to keep user conversations private—claiming the service cannot read chats, store them, or use them for model training because only the user can access the plaintext. The reporting frames Confer as a response to increasing workplace and consumer leakage of sensitive data into AI assistants and broader concerns that AI platforms will monetize user data.
In parallel, commentary warned that major AI providers are increasingly adopting the social-media model of behavioral data collection and advertising, raising the risk of user manipulation and erosion of trust. The piece cites OpenAI’s expansion into search and browsing features and notes OpenAI’s announcement that it will begin testing ads in the free version of ChatGPT, alongside similar ad experiments by other AI products (e.g., Perplexity, Microsoft Copilot, Google’s AI search experiences, and Amazon’s chatbot). The core security implication is that ad incentives can drive more tracking and persuasive optimization in AI responses, increasing privacy exposure and the potential for covert influence over user decisions.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Confer recently added a feature allowing users to import conversation histories from ChatGPT or Claude, reflecting ongoing development of the privacy-focused chatbot platform.
Signal founder Moxie Marlinspike launched Confer, a privacy-focused AI chatbot designed to keep conversations end-to-end encrypted and inaccessible to Confer or third parties for storage or model training. The service uses passkey-derived encryption, confidential computing in a Trusted Execution Environment, and remote attestation.
OpenAI launched the ChatGPT Atlas browser in October 2025, further expanding its AI product ecosystem in a way the article describes as aligned with ad- and data-driven platform models.
OpenAI introduced ChatGPT Search in late 2024, marking a move toward search-style AI experiences that the article cites as part of a broader shift toward attention- and advertising-driven AI products.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcezdnet.com
Open sourceschneier.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers disclosed an **indirect prompt injection** technique against **Google Gemini** that used a malicious **Google Calendar invite** to bypass guardrails and exfiltrate private meeting details. By embedding a hidden natural-language payload in an event description, an attacker could cause Gemini—when later asked an innocuous scheduling question—to summarize a user’s private meetings and write that summary into a newly created calendar event; in many enterprise configurations, that new event could be visible to the attacker, enabling data theft without additional user interaction. The issue was reported as remediated after responsible disclosure, underscoring how AI assistants integrated with enterprise SaaS can create new cross-application data-extraction paths. Separately, OpenAI product rollouts raised enterprise data-handling concerns tied to consumer usage. **ChatGPT Go** (a low-cost tier) was described as introducing an **ad-supported** model that could increase exposure of conversation data and usage patterns to advertising ecosystems, amplifying “shadow AI” risk when employees use personal accounts for work. **ChatGPT Health** was positioned as a dedicated health experience with added protections (e.g., encryption/isolation and claims that user data is not used to train foundation models), but reporting highlighted unresolved questions around safety, privacy, and how sensitive health information is protected in practice—areas that may require additional governance and controls if employees adopt these tools outside approved enterprise channels.
Jun 29, 2026
Anthropic expanded *Claude*’s free tier to include capabilities previously reserved for paid subscribers, including **file creation** (e.g., generating documents, spreadsheets, presentations, PDFs), **longer conversations**, and **connectors** that can pull context from third-party services such as Google Drive/Gmail/Calendar, GitHub, Box, Slack, and others. The change is positioned as reducing the need for a $20/month subscription for some users, and it increases the amount of user data that may be processed via integrations—raising governance considerations around data access, retention, and third-party authorization in enterprise environments. Separately, OpenAI began testing **personalized ads in ChatGPT**, prompting internal criticism and the resignation of an OpenAI researcher who warned that ad-driven optimization could steer the product toward engagement-maximizing behavior similar to social media platforms. OpenAI’s documentation reportedly indicates ad personalization is **enabled by default** in the test and may use information from current and past chat threads and prior ad interactions to select ads, while claiming advertisers do not receive user chats or personal details and that ads will be restricted from appearing near certain sensitive topics (e.g., health, mental health, politics). The public dispute between OpenAI and Anthropic over ad-supported AI highlights emerging privacy and manipulation risks tied to monetization models, especially where conversational history influences targeting.
Jul 12, 2026
AI-powered chatbots and companion applications are raising significant privacy and security concerns as their adoption grows, particularly in sensitive contexts such as romantic or adult interactions. Legal experts highlight that recent litigation is testing how federal and state wiretapping and eavesdropping statutes apply to AI chatbots, with uncertainty over whether insurance policies will cover privacy-related claims. The legal landscape is evolving as courts distinguish between data collected by AI chatbots and traditional analytics tools, and organizations face new challenges in defending against claims of unauthorized interception of communications. At the same time, the proliferation of AI companion apps and the introduction of adult-oriented features by major platforms like OpenAI's ChatGPT have led to increased requirements for age and identity verification. This has resulted in the collection and storage of sensitive personal information, such as government-issued IDs, which has already been targeted in several high-profile data breaches. Research indicates that a significant portion of users, including minors, are sharing personal information with these bots, and recent incidents have exposed hundreds of thousands of users' data due to misconfigured systems. These developments underscore the urgent need for robust privacy protections and security controls in the rapidly expanding AI chatbot ecosystem.
Jun 29, 2026