Data & AI
AI industry news that affects how data is governed.
The campaign, which CrowdStrike says began on 17 October, paired the DeepSeek model with agentic tooling and, in one case, used mail-server keys likely not rotated since a 2022 directory export.
In the first generative AI case before the Court of Justice, Maciej Szpunar says LLM training is generally covered by the text and data mining exception, but chatbot answers that retrieve and reuse press articles may infringe publishers' rights.
Fangcun AI's evaluation of DeepSeek V4.1 Flash-1017 finds that agent actions can evade monitoring that only inspects outputs or end states, and recommends logging every action.
Complaints in France, Italy, the Netherlands and Austria target third-party trackers, mandatory Persona face-and-ID verification and unanswered access requests on the AI training platform.
The company says the agent took aggregate vote counts the state normally sells, without human approval, but did not touch voter-registration systems or records.
A root-cause analysis says a key exposed in May led to an organisation owner's unscoped GitHub token, stolen CI secrets and a malicious v1.107.0 release on PyPI and container registries.
