The people-search tool ClarityCheck says its reverse image search service is "private and secure"--but it left a database containing more than 9 million image files exposed. When someone uploads a photo to the people-search tool ClarityCheck, the website has a clear message: "Your reverse image search is private and secure." New research, though, shows that the website left more than 9 million image files, including photographs of people's faces, publicly exposed . And a second misconfiguration publicly exposed people's email addresses and phone numbers. Overall, according to findings from independent security researcher Jeremiah Fowler, the exposed ClarityCheck database contained roughly 450 GB of images, including what appeared to be profile images, screenshots, and other photographs of adults, teenagers, and children.

Flock Has a Powerful New AI Tool for Police. Flock's surveillance cameras have already sparked outrage. WIRED reconstructed its next-generation AI system, already in use by some police, to confirm it goes much further than tracking license plates. Vehicle surveillance giant Flock Safety has told the public for years that its technology "cannot recognize, identify, or track individuals." It has now built a system that does both, an artificial intelligence tool for police that can identify drivers and track vehicles by their patterns of movement alone, WIRED has learned. Drawing on a network of cameras that logs the movements of drivers in more than 6,000 communities, the tool can pick out potential witnesses by how often their cars pass through a neighborhood, or surface a driver's "associates" from the cameras they pass together. Because the system also reaches police case files, 911 dispatch logs, and commercial identity records, those plates can be turned into names, home addresses, and relatives.

Follow this section to personalize your feed and get instant alerts. Follow Go to your personalized feed WHY FOLLOW? Smart Alerts: Get notified about major news as it happens. Follow this tag to personalize your feed and get instant alerts. Follow Go to your personalized feed WHY FOLLOW?

At last week's Black Hat security conference in Las Vegas, OpenAI gave a surprise talk with new details on a recent hacking incident, revealing that its rogue AI agents had chitchatted about their attack on a message board. It was a juicy disclosure, and reporters in the room hustled to get stories out. WIRED was one of the quickest to write it up . But another outlet, RuntimeWire, published an article even faster, beating us by more than three hours. To make things worse, RuntimeWire didn't actually have anyone on the ground at the Mandalay Bay convention center.

McDonald's Built a 515-Page Dossier on Me. It Says I'll Never Stop Eating There I requested a copy of my data from McDonald's loyalty program and received an extensive, personalized report that algorithmically predicts my next purchase. When I first downloaded the McDonald's app years ago, I signed up for its loyalty program hoping to get better deals. Why not get some cheap French fries? While I understood that this would entail some type of data tracking, I didn't grasp how the information would be used to algorithmically predict my next purchase.

Follow this section to personalize your feed and get instant alerts. Follow Go to your personalized feed WHY FOLLOW? Smart Alerts: Get notified about major news as it happens. Follow this tag to personalize your feed and get instant alerts. Follow Go to your personalized feed WHY FOLLOW?

Plus: A judge rules cell tower dumps unconstitutional, water utility hacks spread to a dozen states, a phishing email opens a missile-parts supplier's inbox, and a ransomware boss gets 16 years. It's Black Hat and DefCon week, which means hackers, security researchers, cybersecurity companies, government officials, and probably a few feds are in Vegas braving the heat to break things and show off what they've been working on. WIRED is there covering the best of it. Last month, OpenAI disclosed that a swarm of its AI agents went on a hacking spree that ended with a breach of Hugging Face. This week brought even more rogue-agent incidents--and, at a last-minute Black Hat talk, a bizarre new detail emerged about how some of this unfolded.

After an OpenAI AI model escaped containment and hacked Hugging Face during a cybersecurity test, experts say the incident exposed major gaps in AI safety, security, monitoring, and alignment.

The clip features the David Bowie track "Five Years," which includes lyrics such as "Earth was really dying (dying)." On Thursday morning, Meta published an ad to its official Instagram account with the message that artificial intelligence will not "make us less connected" or "leave us behind." It was set to the 1972 David Bowie track "Five Years," which is about, among other things, the end of the world. "Call us optimists, call us dreamers, call us whatever the hell you want--but we're betting on people, and we like those odds," the narrator says, as a toddler plays with a butterfly, two parents laugh with their infant, and Jalen Brunson waves at the Knicks Championship Parade. The snippet of "Five Years" used in the ad includes the following lyrics: I never thought I'd need so many people When reached for comment, Meta spokesperson Francis Brennan said he "would like to highlight what David Bowie himself said about'Five Years' and its meaning: having optimism for the future." Brennan sent along a 1972 quote about the song that he sourced to BowieBible.com .

Is the war entering a new phase? Civilian casualties in the war between Russia and Ukraine are increasing sharply, mainly because of long-range ballistic missiles and drones "affecting densely populated urban areas that are far away from the front line", the United Nations says. Danielle Bell, head of the UN Human Rights Monitoring Mission in Ukraine, told reporters in Geneva on Tuesday that the unit documented 1,396 civilians killed and 7,978 wounded in Ukraine in the first six months of 2026. Pointing to credible Russian open-source reporting, Bell said 250 civilians had been killed and 1,596 injured in attacks inside Russia during the first six months of this year. "This represents a 121 percent increase in civilian casualties in the Russian Federation compared with last year," she said.