Follow TNGB
UK Facial Recognition Rollout Approved Amid Wrongful Arrests, Anthropic AI Vulnerability Exposed

UK Man Wrongly Identified by Live Facial Recognition Technology
- Shaun Thompson stopped by Met Police live facial recognition at London Bridge.
- Detention and questioning lasted minutes to a few hours.
- Met Police paid settlement later; Big Brother Watch backs appeal.
LONDON, Apr 22 (TNGB) – Shaun Thompson an anti-knife crime campaigner was stopped at London Bridge in 2024 when live facial recognition technology wrongly flagged him as a wanted suspect. Officers demanded identification fingerprints and body marks despite his documents and released him after the encounter lasted minutes to a few hours. The Met Police paid a settlement later. Big Brother Watch supports his appeal against the recent court decision that affirmed the technology use while highlighting repeated false matches documented in public records.
This case demonstrates how technology errors create lasting harm for innocent citizens.
Why This Matters: False identifications erode public trust in policing tools and expose ordinary people to unwarranted legal trauma.
Anthropic Model Context Protocol Exposes Servers to Remote Code Execution
- Critical vulnerability found in Anthropic MCP SDKs across languages.
- Systemic architectural RCE flaw led to 30-plus disclosures and 10-plus CVEs.
- 150 million-plus downloads expose thousands of AI servers.
SAN FRANCISCO, Apr 22 (TNGB) – Anthropic released its Model Context Protocol to streamline AI tool interactions but OX Security researchers identified a systemic architectural remote code execution flaw in multiple SDK implementations. The issue allows attackers to inject malicious plugins or configurations that execute arbitrary commands on connected systems. Anthropic classified the behavior as intended design rather than a patchable bug leaving thousands of deployments vulnerable across 150 million-plus downloads. Security teams recommend immediate permission audits for tools like Windsurf and Cursor.
This flaw raises urgent questions about the security foundations of rapidly deployed AI infrastructure.
Why This Matters: Unpatched AI protocols create entry points that could compromise entire server fleets at scale.
iPhone and iPad Bug Let Forensic Tools Recover Deleted Signal Messages
- Bug preserved notification data from deleted Signal messages.
- Forensic tools accessed previews in the iOS notification database.
- Apple released iOS 26.4.2 today to close the exposure.
CUPERTINO, Apr 22 (TNGB) – Apple addressed a security shortcoming in iOS and iPadOS that let law enforcement forensic tools recover message previews users had deleted from the Signal application. The flaw resided in the notification database which retained incoming message data even after users cleared chats. Security researchers confirmed specialized tools could extract this information under specific conditions. Apple pushed the fix in version 26.4.2 released today without public fanfare as part of the same update addressing related notification metadata retention.
Users should apply the latest iOS version immediately to close this forensic access point.
Why This Matters: Deleted data retention undermines user expectations of privacy in secure messaging apps.
London Council Spends Millions on AI Powered CCTV Surveillance System
- Hammersmith and Fulham allocates 3.2 million pounds for 500 cameras.
- AI features include slip and fall detection vehicle tracking and aggression alerts.
- Privacy groups warn subjective behavior detection risks ordinary citizens.
LONDON, Apr 22 (TNGB) – Hammersmith and Fulham council approved 3.2 million pounds of taxpayer money to upgrade 500 CCTV cameras with artificial intelligence capabilities. The system will detect slip and fall incidents track vehicles and flag aggressive or suspicious behavior in public areas. Officials cite safety improvements while privacy advocates including Big Brother Watch argue terms like aggression remain vague and prone to false positives on everyday actions. The project appears on front page news today amid national debates on expanded surveillance.
Taxpayers deserve transparency when public money funds tools that monitor everyday activities.
Why This Matters: Government AI surveillance normalizes constant monitoring of public spaces with minimal oversight.
UK Court Rules Live Facial Recognition Can Deploy Nationwide
- High Court affirmed Met Police policy and safeguards for London use.
- Decision supports expanded police deployment in the capital.
- Government plans for nationwide rollout follow the judgment.
LONDON, Apr 22 (TNGB) – A United Kingdom court affirmed the Met Police policy and safeguards for live facial recognition technology in London and rejected claims from plaintiffs about racial bias and inconsistent application. The ruling supports continued use within the capital after reviewing existing oversight measures. Judges determined the policies meet legal requirements for the Met Police operations. Privacy organizations expressed disappointment and confirmed plans to pursue higher court appeals while government statements indicate broader rollout plans.
The ruling sets a precedent that could accelerate adoption of this controversial surveillance method.
Why This Matters: London-specific approval paves the way for government-backed nationwide expansion of police surveillance powers.
Microsoft Faces Two Point Eight Billion Dollar UK Lawsuit Over Server Licensing
- Sixty thousand businesses allege discriminatory cloud pricing.
- Lawsuit claims higher rates for non-Azure Windows Server use.
- London tribunal advanced the case after jurisdiction review.
WASHINGTON D.C., Apr 22 (TNGB) – Microsoft faces a two point eight billion dollar claim in the United Kingdom from around sixty thousand businesses that accuse the company of overcharging for Windows Server licenses on non-Azure cloud platforms. Plaintiffs state Microsoft applied higher wholesale prices outside its own service giving Azure an unfair edge. The UK Competition Appeal Tribunal in London permitted the case to proceed following a preliminary jurisdiction decision. Microsoft denies wrongdoing and insists its licensing follows all regulations.
Companies relying on cloud infrastructure now watch closely as this dispute tests software pricing fairness.
Why This Matters: Antitrust style claims could reshape how software giants price cloud services globally.
New Mirai Botnet Campaign Targets End of Life D-Link Routers
- Malware exploits known remote code execution flaw in outdated models.
- Attack spreads automatically to build larger denial of service botnets.
- Manufacturers warned users to retire vulnerable hardware years ago.
SILICON VALLEY, Apr 22 (TNGB) – Security researchers identified a new Mirai variant that targets end-of-life D-Link routers via a long-known remote code execution vulnerability. The malware infects unpatched devices automatically expanding the botnet for future attacks like distributed denial of service. Many affected models remain in use despite official retirement notices issued years earlier. Experts advise immediate firmware verification or complete hardware replacement.
Home and small business networks face elevated risk until owners address this legacy equipment gap.
Why This Matters: Abandoned IoT devices create persistent entry points for large-scale cyber operations.
Fake TradingView Site Delivers Needle Stealer Malware via AI Agent
- Fraudulent TradingClaw mimics legitimate AI trading assistant.
- SEO poisoning lures cryptocurrency users to fake download pages.
- Malware seizes browser control and extracts financial credentials.
SILICON VALLEY, Apr 22 (TNGB) – Cybercriminals launched a counterfeit TradingView site promoting a fake artificial intelligence trading agent named TradingClaw that installs Needle Stealer malware. Victims searching for trading tools encounter manipulated search results and download what appears to be a helpful browser extension. Once active the malware takes over the browser steals saved credentials and creates pathways for further compromise. Security firms issued alerts urging verification of all trading software sources.
Investors must verify sources before installing any tool promising market advantages.
Why This Matters: SEO poisoning turns routine searches into gateways for credential theft and account takeover.
Elizabeth Warren Warns AI Failure Could Trigger Next Financial Crisis
- Senator cites algorithmic trading and automated lending risks.
- Rapid error amplification or manipulation possible at scale.
- Calls for stronger regulatory frameworks on AI in finance.
WASHINGTON D.C., Apr 22 (TNGB) – Senator Elizabeth Warren cautioned that unchecked artificial intelligence integration into financial markets could spark the next major economic crisis. She pointed to algorithmic trading systems and automated lending platforms capable of magnifying small errors or enabling sophisticated manipulation at speeds previously impossible. Warren referenced recent AI incidents to support demands for new oversight rules before broader adoption. Industry groups maintain existing compliance already addresses these concerns.
Policymakers face pressure to balance innovation with safeguards against systemic financial vulnerabilities.
Why This Matters: AI driven finance amplifies systemic risks that traditional regulations may not yet address.
GitHub Forces Telemetry Collection on All Command Line Interface Users
- Update automatically enrolls every CLI user into data collection.
- No upfront opt-out option offered for existing installations.
- Developers criticize unilateral change affecting daily workflows.
SAN FRANCISCO, Apr 22 (TNGB) – GitHub implemented changes that automatically opt all command line interface users into telemetry collection regardless of previous preferences. The platform gathers usage data to refine features and performance though critics contend the lack of initial opt-out choice undermines user control. Open source contributors and individual developers voiced frustration over the decision impacting millions of daily operations. GitHub states the anonymized data remains essential for product development.
This move tests the balance between corporate data needs and developer expectations for control.
Why This Matters: Forced telemetry on developer tools sets precedents that erode consent in open source ecosystems.


