Samsung TV telemetry, Johns Hopkins AI leak, and India privacy law fight

Hacker finds Samsung TVs capture audio and screenshots for targeted ads

Reverse engineer and cybersecurity bounty hunter log4j reported that their 2025 Samsung TV was serving weirdly targeted ads, then reverse-engineered its Tizen operating system and described the findings as a privacy horror. The code included detailed user telemetry built from packet logging, audio categorization, screenshots and cross-device identification for ad tracking, all designed to extract as much user information as possible to improve targeted advertising. log4j live-tweeted the findings on X, framing the discovery as evidence the company truly listens to its customers. The report puts a spotlight on how much data smart TVs can quietly collect and package for advertising.

Cybersecurity bounty hunter says Samsung TVs use AI to record audio and screenshots for ads — ‘Finally found a company that truly listens to its customers,’ says hacker | Tom’s Hardware →

Topics: Smart devices privacyOnline tracking

Johns Hopkins employee uploaded records of 3,182 patients to unapproved AI tool

An employee at Johns Hopkins Bayview Medical Center in Baltimore uploaded a spreadsheet of 3,182 patients’ records to an unapproved artificial intelligence tool. The data may have included names, medical record numbers, medications given, and admission and treatment dates. Johns Hopkins Medicine found the upload during an internal review on Sept. 21, the same day it happened, and first had the worker delete the chat, also asking the AI company to delete the data. The hospital did not name the company or confirm erasure. It is mailing letters to affected patients and offering a year of free credit monitoring, while reinforcing restrictions on unapproved AI tools.

A hospital employee uploaded patient data to an unapproved AI tool. Where is it now? →

Topics: Healthcare data breachesAI chatbot privacy and data leaks

Twenty-one Indian news publishers challenge data privacy law in Supreme Court

Twenty-one Indian news publishers have asked the Supreme Court to strike down key provisions of India’s data privacy law, arguing it would harm investigative journalism and expose confidential sources. The outlets include businesses headed by Mukesh Ambani and Gautam Adani, such as Network18, NDTV, the Indian Express and Times Internet. In a confidential 698-page filing, the Digital News Publishers Association said the law lacks the written press carve-outs seen in the European Union, Singapore and Britain. The publishers want most contentious provisions, due to take effect in May 2027, quashed. They argue consent and erasure rights could let investigation subjects destroy evidence, and that authorities could force newsrooms to reveal sources. The case is due to be heard Tuesday.

Why 21 Indian News Publishers Are Challenging Central Government’s Privacy Law →

CBFC e-Cinepramaan portal reportedly exposed documents tied to over 500 films

Confidential documents linked to more than 500 film titles were reportedly exposed through the Central Board of Film Certification’s e-Cinepramaan portal, remaining accessible via digital archiving platforms for several days before the exposure came to light. The actual film files were reportedly not leaked. Exposed material reportedly includes scripts of unreleased films, details of cuts and modifications ordered during certification, private distribution agreements and licensing fee details for domestic and international projects. Film producer Girish Johar said in a post on X that the documents include scripts, cut orders and distribution agreements, and that the CBFC is reportedly investigating and conducting a security audit. The extent of the exposure and its consequences remain unclear.

CBFC Data Breach: Confidential Documents Linked To Over 500 Films Reportedly Exposed →

Topics: Government agency data breaches

Cornwall and Brockville police suspend Crime Stoppers after third-party data breach

Cornwall Police Service and Brockville Police suspended their use of Crime Stoppers following a data breach involving a third-party platform used by the anonymous tip organization. Cornwall announced the suspension Monday morning, citing an abundance of caution, and said it has not received confirmation that information submitted through the local program was affected. Brockville issued a similar statement Monday afternoon, saying the breach affects an independent third-party platform and does not impact internal police technology systems. The breach involves U.S.-based Navigate360’s P3 platform, which Crime Stoppers used to manage public tips. Navigate360 said affected information could include addresses, dates of birth, phone numbers and email addresses. Ottawa Police Service and Kingston Police have also suspended use of Crime Stoppers.

Cornwall, Brockville police suspend use of Crime Stoppers following data breach →

Topics: Third-party and vendor breaches