Good morning. This week's stories share a common thread: the places where organizations draw trust boundaries are being tested in ways they didn't anticipate.
Two supply-chain incidents bookend the week — ConnectWise shutting down its backup service after attackers moved through it into customer Microsoft 365 tenants, and OpenAI disclosing four separate unauthorized access events involving financial and medical records. Both cases illustrate how delegating sensitive operations creates exposure that's difficult to predict or contain.
Elsewhere, Meta walked back policy language that would have allowed sweeping content collection from news sites, Amazon deployed AI surveillance to track union organizing in UK warehouses, and Estonia released the complete source code for its national voting system. The technical boundaries we rely on — between service providers and customers, between workplace monitoring and privacy, between licensing and ownership — are being redrawn in real time.
The stories are below.
Security · 3 min readA supply-chain compromise through backup infrastructure allowed attackers to access Microsoft 365 tenants, affecting organizations that trusted ConnectWise with credential management.
Read the full story → | Security · 3 min read Multiple data breaches at a frontier AI lab expose how AI systems create new attack surfaces for sensitive personal information. Read the story → |
|
| Privacy & Regulation · 3 min read AI-powered workplace monitoring now extends to tracking union organizing, raising questions about employee privacy and labor rights in automated environments. Read the story → |
|
| Privacy & Regulation · 3 min read Meta reversed policy language that would have allowed systematic content collection from news sites without explicit permission, following industry backlash over AI training data governance. Read the story → |
|
| Security · 2 min read Developer platform credential leaks expose source code repositories and authentication tokens to potential unauthorized access. Read the story → |
|
| Developer Tooling · 2 min read Web developers using XML transformations in client-side code must migrate to JavaScript alternatives before browser support ends. Read the story → |
|
| Work & Productivity · 3 min read First major AI lab to publicly document how AI deployment affects its own workforce structure and job categories. Read the story → |
|
| Artificial Intelligence · 2 min read AI model providers are adding integrated search capabilities, changing how developers build context-aware applications and shifting infrastructure costs. Read the story → |
|
| Privacy & Regulation · 2 min read Proposed legislation would shift digital game purchases from license agreements to actual ownership, requiring publishers to maintain functionality indefinitely. Read the story → |
|
| Open Source · 3 min read National voting infrastructure released as open source provides unprecedented transparency for digital democracy systems used by more than a million voters. Read the story → |
|
