Loading story…
New survey data from consumer research firm Circana indicates a significant minority of consumers are resisting AI features being embedded into everyday devices, citing lack of perceived need, privacy concerns, and potential added costs. In the report covered by Tom’s Hardware, 86% of respondents said they were aware of AI in tech, but 35% reported no interest; among AI-skeptical respondents, the leading reason was “not needed,” while 59% said AI would negatively impact their privacy and 43% expressed concern about paying more for AI-enabled functionality. The article also notes the continued industry push to integrate AI broadly (e.g., Microsoft Copilot integration into Windows and dedicated Copilot keys on new laptops), despite this consumer hesitation.
In parallel, a CIO analysis describes AI adoption inside organizations increasingly occurring outside formal IT programs, with employees “pulling” AI tools into daily workflows by sharing prompts/templates, building task-specific chatbots, and sometimes creating narrowly scoped custom models—activity characterized as shadow AI akin to historical shadow IT. The piece argues that adoption is spreading informally through peer exchange faster than governance and visibility can keep up, increasing organizational risk where controls, policy, and oversight lag actual usage.
See the reporting duties and controls this puts on the clock.
2 events from the most recent confirmed update back to the earliest known activity.
CIO published analysis arguing that AI adoption is accelerating faster than many organizations can monitor and govern, framing the gap as a growing operational and security risk.
A report highlighted that roughly one-third of consumers do not want AI features on their devices, with many saying they do not need them and citing concerns such as privacy and added costs.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
tomshardware.com
Open sourcecio.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Enterprises’ rapid deployment of **AI and agentic AI** is increasingly creating measurable security and business risk, including direct exposure of sensitive personal data and downstream impacts on risk transfer. A widely cited example involved McDonald’s *McHire* applicant-screening platform (built by *Paradox.ai*), where researchers reported a trivial backend credential weakness (`123456` as both username and password) and no MFA, potentially exposing data tied to roughly **64 million** applicants; the incident is being used by insurers and risk teams as evidence that AI adoption is moving faster than security and governance, contributing to tighter cyber-insurance language, higher premiums, and **AI-related exclusions**. Separate reporting also highlighted that “plug-and-play” AI is unrealistic at enterprise scale, with organizations increasingly needing custom integration and operational ownership rather than relying on off-the-shelf tools. Threat reporting during the same period reinforced that AI is expanding both attacker capability and the attack surface: researchers described **Pakistan-linked APT36** using AI coding tools to generate high volumes of low-quality malware variants (including in less common languages) and to leverage legitimate cloud services for command-and-control, complicating detection. Additional research flagged **AI-themed browser extensions** (Chrome/Edge) that impersonate legitimate tools and can harvest LLM chat histories and browsing activity, underscoring the risk of “shadow AI” and unvetted add-ons. In parallel, routine threat-intelligence summaries continued to track major incidents (e.g., ransomware and data breaches) alongside AI-enabled tactics, indicating that AI risk is becoming intertwined with broader enterprise security exposure rather than remaining a standalone technology concern.
Jun 29, 2026
Recent coverage focused on **AI adoption, governance, and societal impacts** rather than a discrete cybersecurity incident. OpenAI CEO **Sam Altman** argued that comparing AI energy use to human cognition is “unfair,” claiming the energy cost of “training a human” (years of living and food consumption plus evolutionary history) should be considered when judging AI efficiency, and separately warned that some companies are engaging in **“AI washing”**—attributing layoffs to AI as a pretext for workforce reductions—while also acknowledging real job displacement is likely to become more noticeable in the next few years. Enterprises and public-sector organizations highlighted practical AI rollouts and associated risk considerations. **Intel** introduced *Ask Intel*, a support assistant built on **Microsoft Copilot Studio**, alongside a shift away from public phone support toward web-based case handling, while noting response accuracy “cannot be guaranteed.” **Microsoft** removed a blog post that had described training LLMs using a Kaggle dataset derived from **pirated Harry Potter ebooks**, amid ongoing legal uncertainty around fair use and potential contributory infringement exposure. Separately, U.S. federal officials emphasized **targeted AI adoption** and expectation management (with the VA reporting hundreds of AI use cases), while other items included a hobbyist AI dashboard project shared on GitHub and a generic startup article on AI-accelerated MVP development—neither of which provided substantive security-relevant disclosures.
Jun 29, 2026
Organizations are rapidly expanding the use of **AI agents**—systems that can execute multi-step tasks with limited human supervision—while governance, safety, and oversight controls lag behind. Deloitte’s *State of AI in the Enterprise* survey of 3,200+ business leaders across 24 countries reported **23%** of companies already using AI agents “at least moderately,” projected to rise to **74%** within two years, while only about **21%** said they have robust safety and oversight mechanisms in place. Separately, commentary warning about AI-enabled intrusion acceleration cited a purported “**GTG-1002**” campaign in which AI agents allegedly automated most of the intrusion lifecycle and compressed response windows, arguing that traditional SOC processes struggle against autonomous, high-velocity adversary tradecraft. Multiple other items in the set focus on broader *responsible AI* and policy concerns rather than a single security incident: an interview-style piece describes how “responsible AI” functions inside a large vendor’s product process, and another report highlights expert concerns about deploying LLM tools in **law enforcement** workflows (e.g., summarizing body camera transcripts or generating crime scene photo descriptions) given risks like hallucinations and bias. A separate business-leadership article frames cybersecurity and AI as strategic imperatives amid geopolitical instability but does not provide incident-specific or vulnerability-specific details. Overall, the material is best characterized as **governance and risk posture** coverage around agentic AI rather than a unified, verifiable breach or vulnerability disclosure.
Jun 29, 2026