Cybersecurity experts are warning about WormGPT, a black-market AI tool designed for criminals. Unlike mainstream AI models that include content filters, WormGPT deliberately omits safeguards, allowing users to generate phishing emails, malware code, and scam scripts at scale.

Health and wellness apps have surged in popularity, but their privacy practices are often murky. An analysis of 10 top apps — from fitness trackers to meditation and period-tracking apps — reveals that most collect far more data than necessary and reserve the right to share it with advertisers or data brokers.

Phishing is the practice of tricking people into revealing sensitive information, and has long been a top cyber threat. But in 2025, phishing has entered a new era: attackers are now using AI tools to generate highly convincing and customized phishing messages at scale.

In early 2025, TikTok quietly updated its privacy policy for users in the U.S. and Europe. The changes, buried deep in the fine print, outline broader data-sharing arrangements with its parent company ByteDance, as well as unnamed “business partners.” Privacy advocates warn that these updates could expose users to greater tracking, profiling, and potential government access.

AI is transforming consumer lending, promising faster credit decisions and greater access. But the reality is more complicated. Many AI-based scoring systems rely on alternative data — utility payments, online behavior, even social media activity — to predict creditworthiness.

Almost every website now greets visitors with a cookie consent banner, claiming to offer a choice over tracking. But privacy advocates warn that many of these pop-ups are designed not to inform, but to manipulate. Known as dark patterns, these interfaces use visual tricks to steer users toward accepting all cookies, often burying “reject all” options behind extra clicks, small text, or confusing layouts.

In a significant development within the 2025 federal budget bill, lawmakers have proposed a 10-year moratorium on state-level AI regulation. This provision, supported by major tech lobbying groups and some Republican legislators, aims to establish a uniform national standard for AI governance. Proponents argue that avoiding a fragmented regulatory patchwork will reduce legal complexity and foster innovation and economic competitiveness.

Europe’s landmark AI Act has officially entered the implementation phase, ushering in one of the world’s most comprehensive frameworks for governing artificial intelligence. The law targets high-risk AI systems, including biometric identification, predictive policing, and AI in critical infrastructure, with strict requirements for transparency, human oversight, and risk assessments.

A new IBM global study highlights a troubling gap between AI policy rhetoric and real-world governance. Although 80% of executives say AI governance is critical to responsible innovation, only 20-30% have put robust practices in place.