Proton

Proton’s Tool Reveals What ChatGPT and Claude Know

Swiss company Proton launched AI Paper Trail, a browser tool that analyzes exported chat data from ChatGPT and Anthropic’s Claude to summarize what those chatbots may have learned about a user. The t3n article cites a Bitkom survey showing rising AI use and user concern about data security, and notes that OpenAI and Anthropic say they do not create advertising profiles from user data though exports can be used for model training depending on settings. The article explains how users export data from ChatGPT and Claude, what Proton’s tool reports (including a “Privacy Exposure” score and estimated data value), and reiterates deletion and retention nuances in both providers’ policies.

96% of Ransomware Victims Are Small Businesses

A July 2026 analysis highlights that ransomware overwhelmingly targets small and medium-sized businesses (SMBs): Verizon's 2026 DBIR reports that 96% of ransomware victims (where size was known) were SMBs, and ransomware appears in 48% of confirmed breaches. Third-party involvement in SMB breaches has risen (55%), and many very small businesses still allocate no cybersecurity budget. The article describes the modern ransomware kill chain, identifies vulnerability exploitation as the top initial access vector, and calls out an urgent WordPress pre-auth RCE chain (CVE-2026-60137 + CVE-2026-63030, aka “wp2shell”) with fixes available in patched WordPress releases. Practical mitigations recommended include verified immutable backups, a quick security baseline scan, rapid patching, enabling MFA, and locking down admin surfaces.

AI-Agent 'Jadepuffer' Runs Adaptive Ransomware

Security researchers at Sysdig uncovered a novel ransomware attacker dubbed “Jadepuffer” that appears to be controlled by an AI agent. The agent used natural-language-driven code and rapid iterative problem-solving — in one case completing an adaptation in 31 seconds — to place ransomware. It exploited a vulnerability in the open-source Langflow framework to harvest unencrypted cloud credentials and API keys, which enabled lateral movement and persistent tasks. Jadepuffer targeted MySQL servers running the Alibaba Nacos configuration service, creating admin accounts and encrypting 1,342 configuration files before deleting originals. The attacker generated a ransom table with a Bitcoin wallet and Proton‑Mail contact; analysts report the wallet moved roughly 46 BTC across about 73 transactions. Researchers warn AI agents lower the skill barrier for automated, adaptive cyberattacks against unpatched systems.