AI in klare taal edition
This week is all about what you entrust to AI tools and who else can get access.
Meta pauses sharing in AI agent Muse after leak of private data
Meta has paused the sharing feature of its new AI agent Muse. Researchers at security company Claroc found 6,800 links to shared conversations. They only needed one search query to find them. They opened a few hundred links and found information that was not meant to be public. It included an internal revenue analysis for a director, a loan application with the requested amount and a holiday calendar with dozens of employees. There was also a bank fraud report that included part of an account number. Meta says users can share a page that is reachable by anyone with the link. The company is reviewing the report and is thinking about changes to how the links can be found. This happened after questions from Ars Technica. Claroc says it reported the findings on 8 October through Meta's bug reporting program. There was no response via LinkedIn either. Mark Zuckerberg said last month that Muse was "built from the ground up for privacy and safety".
Background for subscribersWhat you share, connect or let an AI read along with does not always stay within your own circle: a share link turned out to be findable, and according to Ars Technica, connected data also plays a role in advertising. An assistant like Duet will soon look into your apps, so you need to decide in advance what you let it do. Make that decision for each tool, before you share or connect anything.
Hackers exploited PHP flaw four days before it was made public
Hackers attacked two flaws in PHP four days before they were made public, Amazon reports. On Saturday, Amazon saw an attempt on its network that attracts decoy traffic. PHP is a programming language that a large part of the internet runs on. The flaws are called PHP2Shell and were found with AI models from OpenAI and Google. The bugs had been there for more than ten years. The American NSA warns organizations that use PHP to update immediately or take their systems offline. British authorities are also warning, and according to reports, government sites in Europe went offline to update. Cloudflare saw thousands of attempts at exploitation in the ten hours before the announcement. Now there are millions. Do you run a PHP site? Then install the update released by the PHP maintainers. Experts say that after updating you will probably not find out whether data was stolen. Old sites are at extra risk, such as municipal sites that have not been updated for ten years.
Background for subscribersGoogle changes privacy policy: Gmail data may count in advertising
Google changed its privacy policy on 16 October. Android Authority was the first to notice. Earlier, it said that Google did not show personalized ads based on your content from Drive, Gmail or Photos. That sentence has changed. The new text leaves room to use data from these apps anyway, if they are shared with other Google services. This concerns Personal Intelligence, a feature from early 2026. With it, you give data from several apps to the Gemini app and to AI search features such as AI Mode. The Gemini app currently has no ads, but AI search features can show sponsored content. Google says ads are not based 'directly' on your inbox or Photos library. According to Google, linking is opt-in and sensitive information is not used. Ars Technica reads it differently: the same data that influences your answers in AI Mode is also used for advertising audiences.
Background for subscribersAnthropic launches Claude Duet: an AI assistant that contacts you on its own
Anthropic has announced Claude Duet, an AI assistant that contacts you before you ask for anything. Duet connects to your apps and sends a short overview of important points every morning. After that, it checks again every few hours and speaks up when something is going on. It can do simple admin tasks, but also heavier ones, such as building web apps. Anthropic made it for professionals and small business owners who have too much to keep track of. Duet is a research preview and only available through a waitlist. It is limited to Pro and Max subscribers in the United States, so in the Netherlands you cannot use it yet. You use it on the web or in its own iOS app. The background checks count toward the limits of your Claude subscription.
Background for subscribersAI and tech, made simple.
This is your AI in klare taal edition.
My inklaretaal
inklaretaal · Amsterdam · © 2026