Loading story…
Anthropic expanded Claude’s free tier to include capabilities previously reserved for paid subscribers, including file creation (e.g., generating documents, spreadsheets, presentations, PDFs), longer conversations, and connectors that can pull context from third-party services such as Google Drive/Gmail/Calendar, GitHub, Box, Slack, and others. The change is positioned as reducing the need for a $20/month subscription for some users, and it increases the amount of user data that may be processed via integrations—raising governance considerations around data access, retention, and third-party authorization in enterprise environments.
Separately, OpenAI began testing personalized ads in ChatGPT, prompting internal criticism and the resignation of an OpenAI researcher who warned that ad-driven optimization could steer the product toward engagement-maximizing behavior similar to social media platforms. OpenAI’s documentation reportedly indicates ad personalization is enabled by default in the test and may use information from current and past chat threads and prior ad interactions to select ads, while claiming advertisers do not receive user chats or personal details and that ads will be restricted from appearing near certain sensitive topics (e.g., health, mental health, politics). The public dispute between OpenAI and Anthropic over ad-supported AI highlights emerging privacy and manipulation risks tied to monetization models, especially where conversational history influences targeting.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Anthropic introduced four new free-tier Claude features: file creation and editing, third-party app connectors, user-defined custom skills via uploaded text files, and longer conversations through automatic conversation compaction. The update expanded free-user functionality and narrowed some differences with paid plans.
An OpenAI researcher left the company and publicly warned that adding advertising to ChatGPT could manipulate users and push the product down a 'Facebook' path. The departure and warning highlighted internal concern over the platform's future monetization direction.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two separate developments highlighted growing security and privacy concerns around consumer AI chatbots as the industry shifts toward ad-driven monetization. **Moxie Marlinspike** (Signal founder) launched *Confer*, positioned as an “end-to-end encryption for AI chats” tool intended to keep user conversations private—claiming the service cannot read chats, store them, or use them for model training because only the user can access the plaintext. The reporting frames *Confer* as a response to increasing workplace and consumer leakage of sensitive data into AI assistants and broader concerns that AI platforms will monetize user data. In parallel, commentary warned that major AI providers are increasingly adopting the social-media model of **behavioral data collection and advertising**, raising the risk of user manipulation and erosion of trust. The piece cites OpenAI’s expansion into search and browsing features and notes OpenAI’s announcement that it will begin testing ads in the free version of **ChatGPT**, alongside similar ad experiments by other AI products (e.g., Perplexity, Microsoft Copilot, Google’s AI search experiences, and Amazon’s chatbot). The core security implication is that ad incentives can drive more tracking and persuasive optimization in AI responses, increasing privacy exposure and the potential for covert influence over user decisions.
Jun 29, 2026
Google is rolling out *AI Mode* personalization that can **connect Google Search to Gmail and Google Photos** for opt-in users, aiming to deliver more tailored results based on personal context. The feature is positioned as “secure” and is initially available via Labs for Google AI Pro and AI Ultra subscribers (with limited account eligibility), with Google stating the system processes data for specific prompts and does not directly train on a user’s inbox or photo library; the change nonetheless increases the amount of sensitive personal data that can be accessed during AI-assisted search workflows. OpenAI is testing an upgrade to **ChatGPT Temporary Chat** that keeps the session from being saved to history or used for model improvement, while still allowing **personalization signals** (e.g., memory/style preferences) to apply—alongside a stated retention window where OpenAI may keep a copy for up to **30 days** for safety. Separately, researchers and commentators warned about an “**Ouroboros effect**” where ChatGPT may cite AI-generated repositories such as xAI’s Grokipedia, increasing the risk of **misinformation loops** and “content traps” if AI systems do not rigorously vet sources, potentially degrading trust and decision-making even without direct training on the cited content.
Jun 29, 2026
Researchers disclosed an **indirect prompt injection** technique against **Google Gemini** that used a malicious **Google Calendar invite** to bypass guardrails and exfiltrate private meeting details. By embedding a hidden natural-language payload in an event description, an attacker could cause Gemini—when later asked an innocuous scheduling question—to summarize a user’s private meetings and write that summary into a newly created calendar event; in many enterprise configurations, that new event could be visible to the attacker, enabling data theft without additional user interaction. The issue was reported as remediated after responsible disclosure, underscoring how AI assistants integrated with enterprise SaaS can create new cross-application data-extraction paths. Separately, OpenAI product rollouts raised enterprise data-handling concerns tied to consumer usage. **ChatGPT Go** (a low-cost tier) was described as introducing an **ad-supported** model that could increase exposure of conversation data and usage patterns to advertising ecosystems, amplifying “shadow AI” risk when employees use personal accounts for work. **ChatGPT Health** was positioned as a dedicated health experience with added protections (e.g., encryption/isolation and claims that user data is not used to train foundation models), but reporting highlighted unresolved questions around safety, privacy, and how sensitive health information is protected in practice—areas that may require additional governance and controls if employees adopt these tools outside approved enterprise channels.
Jun 29, 2026