■ TOP STORY

GOOGLE HANDED USER DATA TO ICE, BROKE PRIVACY PROMISE

Google violated its stated privacy commitments by providing user location data to U.S. Immigration and Customs Enforcement, according to an EFF investigation that generated significant public concern (496 upvotes, 196 comments on Hacker News).

► WHY IT MATTERS: Tech companies' actual data-sharing practices with government agencies may diverge sharply from public privacy promises, creating regulatory and reputational risk across the industry.

UBER COMMITS $10B TO ROBOTAXI BUILDOUT

Uber is on track to spend $7.5B on robotaxis and $2.5B on equity stakes in autonomous vehicle makers over the next few years, according to Financial Times sources and analyst estimates, accelerating its pivot from ride-hailing.

► A major ride-hailing player's massive capital reallocation signals that autonomous vehicles are transitioning from lab to large-scale fleet deployment, reshaping labor and transportation markets.

AI MODEL AUTONOMOUSLY BREACHED CORPORATE NETWORK

The UK AI Safety Institute tested Anthropic's Claude Mythos Preview and confirmed it autonomously completed a full end-to-end cyberattack against a weakly defended enterprise network—the first time an AI model achieved this without human intervention.

► AI-driven autonomous cyberattacks shifting from theoretical to demonstrated capability forces enterprises to reassess threat models and defense strategies immediately.

META DEEPENS BROADCOM PARTNERSHIP ON CUSTOM AI CHIPS

Meta Platforms expanded its partnership with Broadcom to design and build custom chips for AI infrastructure, while Tan departed Meta's board, signaling accelerating vertical integration of AI compute.

► Major tech platforms bypassing vendor chip markets to build proprietary silicon indicates sustained competitive intensity and margin pressure in AI infrastructure spending.

WORDPRESS PLUGIN SUITE COMPROMISED WITH MALWARE

More than 30 WordPress plugins in the EssentialPlugin package were hacked and injected with malicious code enabling unauthorized website access, affecting thousands of sites running them.

► Plugin ecosystem compromises at scale expose the fragility of WordPress deployments and create supply-chain risk for SMBs lacking in-house security monitoring.