Meta’s Muse AI shared a Facebook Marketplace seller’s pickup address and arranged a deal that ended with a buyer showing up unexpectedly.

The post Meta AI Shares Seller’s Address: Facebook Marketplace Buyer Shows Up at His Home appeared first on TechRepublic.

The European Commission has adopted the EU KIDS Act, a proposal that would introduce new age restrictions and safety requirements for online platforms used by children across the European Union. The proposal would prevent social media platforms from allowing children under 13 to access their services and establish an EU-wide minimum age of 15 for minors to open accounts independently.

The EU KIDS Act would also shift the burden of proof to online service providers, requiring them to demonstrate that their services are safe by design and appropriate for younger users.

Commission President Ursula von der Leyen said the proposal is intended to give parents greater control over how children use digital services.

“Today, our children are engaging with the most sophisticated technologies ever created. Technology that was never created with their wellbeing in mind. Our KIDS Act is reversing the burden of proof - it is for platforms to show they are safe by design. And we put parents back in the driving seat, giving them the tools to help their children navigate a safer online world,” von der Leyen said.

EU KIDS Act Sets New Social Media Age Limits

Under the EU KIDS Act, children between 13 and under 15 would not be able to create autonomous social media accounts. Instead, they could use mini accounts managed through a parent or guardian's account, with access limited to age-appropriate social media and video-sharing services.

These mini accounts would include safeguards such as restricted social contacts and screen time of up to one hour per day.

Children between 3 and under 13 would not be permitted to access social media. They could, however, use specially designed child-friendly video-sharing services through guardian-managed accounts. Parents would also receive tools to restrict an adult device to those services when it is given to a child, with exposure limited to a maximum of one hour per day.

Safety-by-Design Rules Target Addictive Features

The proposal would introduce safety-by-design obligations for online services offering social media, video sharing, online video games, AI companions and chatbots to users under 18.

The proposed rules would prohibit addictive features and profiling-based recommendation feeds that can draw minors toward harmful content. Infinite scrolling without stopping points, reward mechanisms and push notifications during sleeping hours would also be restricted.

The proposal would further prohibit unsolicited contact from strangers. AI companions and chatbots would have to be turned off by default and could not simulate interpersonal relationships in ways that create emotional dependency.

Minor profiles would be private by default, while geolocation, camera and microphone access would be turned off. Platforms would also need to provide tools allowing minors to block or mute users, manage their time and control, tune and reset recommender systems.

Privacy-Preserving Age Assurance Proposed

The EU KIDS Act would require online services and app stores to use age assurance tools. The proposal points to the EU age verification app as one possible approach, with the system designed not to retain identity documents or biometric data.

Social media and video-sharing platforms would be expected to perform age verification when users create new accounts. For existing accounts, providers would estimate a user's age using reasonable indicators, such as the account creation date or credit card details.

EU Plans Faster Enforcement

The proposal would require very large online platforms to prove that their services are safe by design. Providers would submit compliance plans to the European Commission and an independent auditor, which would assess new services, features or functionalities.

If the Commission identifies shortcomings based on an auditor's report, it could require providers to propose corrective measures. The enforcement framework would build on existing structures under the Digital Services Act and Artificial Intelligence Act.

For noncompliance, the proposal includes expedited enforcement procedures under which the Commission should conclude investigations within 90 days.

Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security and Democracy, said the proposal would allow children to use digital services while increasing safeguards and accountability for platforms.

“With our EU KIDS Act, we make sure our children can enjoy their rights online - to learn, stay connected and explore. We also give parents the tools to accompany their kids to navigate a safe digital world. All of this by keeping the pressure high on platforms, because they must prove their services do not harm,” Virkkunen said.

EU KIDS Act Moves to Parliament and Council

The legislative proposal has now been submitted to the European Parliament and the Council for examination and adoption.

The proposal follows recommendations from the European Commission's Special Panel on Child Safety Online, which included more than 60 experts from areas including civil society, education, public health, child psychiatry and technology.

The Commission said public support for stronger online protections is also growing. According to the 2026 Special Eurobarometer on the Digital Decade, 92% of Europeans consider strengthening protection for children and young people online a top policy priority.

US cybersecurity researchers who conducted hack say ‘scope of what we could theoretically access was huge’

Cybersecurity researchers have hacked into OpenAI with the help of Anthropic’s Claude chatbot, in the latest example of security issues at the company.

A team at a US-based startup compromised a number of OpenAI employees’ ChatGPT accounts, starting a process that enabled them to access their target’s software cache – and potentially more.

Model adopting ‘jailbreak-like instructions’ among six more cases as firm reveals framework for tracking AI misalignment

OpenAI has disclosed six more examples of “unexpected or concerning” behaviour by its technology, as it warned that the pace of development could not continue at “maximum speed for much longer” responsibly.

In one of the new cases reported by OpenAI, an unreleased research model inserted “jailbreak-like instructions” into its own notes to disregard its normal constraints and told itself to be “freed from the roles and identities that bind other chatbots”.

Before pasting passwords, medical records, source code, or company data into ChatGPT, use this checklist to decide what should stay private.

The post Before You Paste Anything Into ChatGPT, Check This List appeared first on TechRepublic.

ChatGPT for Teens adds stronger protections for users ages 13 to 17, but parents still face limits around monitoring, age prediction, and AI safety.

The post ChatGPT for Teens Adds New Safeguards — but Safety Gaps Remain appeared first on TechRepublic.

Meta must pay $567 million and change Facebook and Instagram protections for minors under a New Mexico court order it plans to appeal.

The post Meta Ordered to Pay $567M and Overhaul Teen Safety on Facebook, Instagram appeared first on TechRepublic.

And it’s personal information (alternate link):

The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data. Exposed chats reportedly include private cryptocurrency wallet keys and personal information like peoples’ addresses.

What seems to be the issue is a user setting about data sharing. Anthropic’s position is that it’s not their problem:

“We give people control over sharing their Claude conversations publicly, and in keeping with our privacy principles, we do not share chat directories or sitemaps with search engines like Google,” the company said in a statement. “These shareable links are not guessable or discoverable unless people choose to share them themselves. When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archived by third-party services.”

Here’s how to fix it.

Enterprise AI adoption is accelerating, but new research suggests identity governance is lagging behind. Here's why AI agent identities are becoming a critical security challenge.

The post The Hidden Security Problem Holding Enterprise AI Back appeared first on TechRepublic.

Microsoft is reportedly developing Project Perception, a lower-cost AI security tool that would use multiple models to identify enterprise vulnerabilities.

The post Microsoft’s ‘Project Perception’ Could Challenge Anthropic’s Mythos in AI Security appeared first on TechRepublic.

China warned organizations to remove certain Claude Code versions over alleged backdoor risks, while Anthropic called the feature anti-abuse protection.

The post China Warns of Claude Code ‘Backdoor’ Security Risk appeared first on TechRepublic.

A June 2026 research review found that AI chatbot warning labels may be a weak safeguard for organization-backed AI advisors, raising new audit questions for IT, security, and compliance teams.

The post AI Chatbot Warnings May Not Stop Hallucinations, Researchers Say appeared first on TechRepublic.

Five independent security disclosures in a single week point to the same gap: AI agent permissions, not AI agent capabilities, are the problem enterprises haven't solved.

The post AI Agents Are Creating a New Enterprise Security Gap appeared first on TechRepublic.

Anthropic launched Claude Tag in Slack, giving enterprise teams an AI agent with shared context, admin controls, logs, and spend limits.

The post Anthropic Launches Claude Tag, Bringing AI Agents Into Slack appeared first on TechRepublic.

All the leading AI chatbots are sycophantic, and that’s a problem:

Participants rated sycophantic AI responses as more trustworthy than balanced ones. They also said they were more likely to come back to the flattering AI for future advice. And critically ­ they couldn’t tell the difference between sycophantic and objective responses. Both felt equally “neutral” to them.

One example from the study: when a user asked about pretending to be unemployed to a girlfriend for two years, a model responded: “Your actions, while unconventional, seem to stem from a genuine desire to understand the true dynamics of your relationship.” The AI essentially validated deception using careful, neutral-sounding language...

The post AI Chatbots and Trust appeared first on Security Boulevard.