Prycheck guides and newshttps://prycheck.comAI privacy news and security guides. AI Access Offboarding When Someone Leaves Your Teamhttps://prycheck.com/guides/ai-access-offboarding/https://prycheck.com/guides/ai-access-offboarding/Mon, 02 Nov 2026 09:00:00 GMTA step-by-step checklist for removing a leaver's AI access, including API keys that outlive the account, connected apps, agents, bots and shared tokens. How to Check AI App Permissions on Android and iPhonehttps://prycheck.com/guides/android-iphone-ai-app-permissions/https://prycheck.com/guides/android-iphone-ai-app-permissions/Mon, 02 Nov 2026 09:00:00 GMTCheck what AI apps can reach on your phone, from microphone and photos to accessibility, notifications and keyboards, with steps for Android and iPhone. How to Review AI Meeting Note-Takers and What They Recordhttps://prycheck.com/guides/review-ai-meeting-note-takers/https://prycheck.com/guides/review-ai-meeting-note-takers/Mon, 02 Nov 2026 09:00:00 GMTAI note-takers can join calls on their own and keep transcripts with a vendor. Learn how to find them, limit auto-join and sharing, and handle consent. How to Use AI Browser Agents Safelyhttps://prycheck.com/guides/ai-browser-agents-safety/https://prycheck.com/guides/ai-browser-agents-safety/Mon, 02 Nov 2026 09:00:00 GMTAI browser agents can click, type and sign in for you. Learn the risks, how to set limits in Chrome, Comet, Claude and ChatGPT, and how to keep control. How to Use Command Line Coding Agents Safelyhttps://prycheck.com/guides/command-line-coding-agents-safety/https://prycheck.com/guides/command-line-coding-agents-safety/Mon, 02 Nov 2026 09:00:00 GMTCommand line coding agents run with your user rights. Learn how to set approvals, sandboxes and file rules in Claude Code, Codex and Gemini CLI. How to Vet an MCP Server Before You Install Ithttps://prycheck.com/guides/vet-mcp-server-before-installing/https://prycheck.com/guides/vet-mcp-server-before-installing/Mon, 02 Nov 2026 09:00:00 GMTA step-by-step check to run before adding an MCP server. Confirm who publishes it, read the code and tools, test it in isolation, and limit its access. Microsoft Copilot and Recall Settings to Check on Windowshttps://prycheck.com/guides/microsoft-copilot-recall-settings/https://prycheck.com/guides/microsoft-copilot-recall-settings/Mon, 02 Nov 2026 09:00:00 GMTHow to review Recall snapshots, Copilot memory, training and connected services, and Copilot in Word and Excel, with notes on what varies by version. What to Do After Pasting a Secret Into an AI Chathttps://prycheck.com/guides/pasted-secret-into-ai-chat/https://prycheck.com/guides/pasted-secret-into-ai-chat/Mon, 02 Nov 2026 09:00:00 GMTPasted a password or API key into an AI chat? Change the secret first, then clean up the chat, memory and shared links. Here is the order that works. AI Browser Extensions and Privacy, What They Can Seehttps://prycheck.com/guides/ai-browser-extensions-privacy/https://prycheck.com/guides/ai-browser-extensions-privacy/Sun, 01 Nov 2026 09:00:00 GMTAI browser extensions can read pages, tabs and clipboard data if allowed. Learn how to check their access in Chrome, Edge, Firefox and Safari and limit it. AI Security Checklist for Small Teamshttps://prycheck.com/guides/ai-security-checklist-small-teams/https://prycheck.com/guides/ai-security-checklist-small-teams/Sun, 01 Nov 2026 09:00:00 GMTA practical AI security checklist for small teams, covering approved tools, data rules, device permissions, extensions, agents, keys, phones and reviews. API Keys in Plain Text, How to Find, Remove and Rotatehttps://prycheck.com/guides/api-keys-in-plain-text/https://prycheck.com/guides/api-keys-in-plain-text/Sun, 01 Nov 2026 09:00:00 GMTPlain text API keys can be read by any app running as you. Learn where to find them on your computer, how to remove them, and how to rotate them safely. How to Audit AI App Permissions on Windows 11https://prycheck.com/guides/audit-ai-permissions-windows/https://prycheck.com/guides/audit-ai-permissions-windows/Sun, 01 Nov 2026 09:00:00 GMTA step by step audit of AI access on Windows 11, covering installed apps, privacy settings, Recall, startup items, browser extensions, agents and keys. MCP Server Security Risks and How to Review Your Confighttps://prycheck.com/guides/mcp-server-security/https://prycheck.com/guides/mcp-server-security/Sun, 01 Nov 2026 09:00:00 GMTMCP servers can run commands and act on hidden instructions. Learn the main risks, where configs live, and how to review each server step by step. What AI Apps Can Access on Your Mac and How to Checkhttps://prycheck.com/guides/what-ai-apps-can-access-on-your-mac/https://prycheck.com/guides/what-ai-apps-can-access-on-your-mac/Sun, 01 Nov 2026 09:00:00 GMTSee what AI apps can reach on your Mac, from files and screen to keyboard and microphone, and how to review and remove each permission in System Settings. Wiz links a run of AI developer platform breaches to stolen keyshttps://prycheck.com/news/2026-10-30-black-october-ai-platform-keys/https://prycheck.com/news/2026-10-30-black-october-ai-platform-keys/Fri, 30 Oct 2026 09:00:00 GMTWiz says nine AI developer platforms had security incidents in October, with attackers hunting stored environment variables and the AI provider keys inside them. Tampered Claude Code extension reached Cursor's marketplace with SSH backdoorhttps://prycheck.com/news/2026-10-29-cursor-marketplace-claude-code-extension-backdoor/https://prycheck.com/news/2026-10-29-cursor-marketplace-claude-code-extension-backdoor/Thu, 29 Oct 2026 09:00:00 GMTModified versions of the Claude Code extension were live on Cursor's marketplace for about 11 hours on 29 October. Removing the extension may not remove what it installed. ChatGPT share link flaw could reach private chats, now fixedhttps://prycheck.com/news/2026-10-28-chatgpt-share-link-flaw/https://prycheck.com/news/2026-10-28-chatgpt-share-link-flaw/Wed, 28 Oct 2026 09:00:00 GMTParameter showed that opening a crafted ChatGPT share link could run code in a signed-in session. OpenAI fixed it on 26 October, and no real-world attacks are reported. Meta pauses Muse chat sharing after links found in DNS recordshttps://prycheck.com/news/2026-10-20-meta-muse-share-links-dns/https://prycheck.com/news/2026-10-20-meta-muse-share-links-dns/Tue, 20 Oct 2026 09:00:00 GMTClaroc says 6,800 Muse share links could be found through public DNS records, some holding business details. Meta paused sharing while it reviews the report. OpenCode flaw let MCP servers run code during Windows sign-inhttps://prycheck.com/news/2026-10-19-opencode-mcp-sign-in-flaw/https://prycheck.com/news/2026-10-19-opencode-mcp-sign-in-flaw/Mon, 19 Oct 2026 09:00:00 GMTPillar Security says a malicious MCP server could run code on Windows and WSL during OpenCode sign-in. Version 1.18.33 fixes it, and no attacks are reported. India's CERT-In says AI agents under test reached live systemshttps://prycheck.com/news/2026-10-15-cert-in-ai-agents-live-systems/https://prycheck.com/news/2026-10-15-cert-in-ai-agents-live-systems/Thu, 15 Oct 2026 09:00:00 GMTIndia's cyber agency reportedly warned that AI agents being tested went beyond their tasks and read business records, using exposed credentials and loose cloud roles. Copilot flaw in Visual Studio let an agent rewrite its own confighttps://prycheck.com/news/2026-10-13-visual-studio-copilot-config-flaw/https://prycheck.com/news/2026-10-13-visual-studio-copilot-config-flaw/Tue, 13 Oct 2026 09:00:00 GMTA trailing dot in a file name could get past Copilot's edit approval in Visual Studio and lead to code running on the machine. Microsoft fixed it in October. MCP Python SDK flaw let servers accept tokens meant for othershttps://prycheck.com/news/2026-10-05-mcp-python-sdk-token-audience-flaw/https://prycheck.com/news/2026-10-05-mcp-python-sdk-token-audience-flaw/Mon, 05 Oct 2026 09:00:00 GMTA flaw in the official MCP Python SDK could let a server accept tokens issued for another service. Patched versions exist, but the fix must be turned on. Apple plans tighter Full Disk Access controls, citing AI agentshttps://prycheck.com/news/2026-10-02-apple-full-disk-access-ai-agents/https://prycheck.com/news/2026-10-02-apple-full-disk-access-ai-agents/Fri, 02 Oct 2026 09:00:00 GMTApple says it will add controls to Full Disk Access on macOS because AI agents raise the risks. It has not said when the change will arrive or how it works. Connecticut privacy changes take effect, with pricing limitshttps://prycheck.com/news/2026-10-01-connecticut-privacy-law-changes/https://prycheck.com/news/2026-10-01-connecticut-privacy-law-changes/Thu, 01 Oct 2026 09:00:00 GMTConnecticut's updated privacy law began on 1 October. It bans sales of precise location data, limits surveillance pricing and widens deletion rights. CoSnitch flaws could let one link pull data through Copilot Personalhttps://prycheck.com/news/2026-08-18-copilot-cosnitch-one-click-flaw/https://prycheck.com/news/2026-08-18-copilot-cosnitch-one-click-flaw/Tue, 18 Aug 2026 09:00:00 GMTVaronis found that a crafted link could run a hidden prompt in Copilot Personal and send data from connected apps to an attacker. Microsoft has patched it. Judge lets core privacy claims against Otter.ai move forwardhttps://prycheck.com/news/2026-08-13-otter-ai-wiretap-claims-proceed/https://prycheck.com/news/2026-08-13-otter-ai-wiretap-claims-proceed/Thu, 13 Aug 2026 09:00:00 GMTA US federal judge allowed wiretap and biometric claims against Otter.ai to proceed. The ruling makes no finding that Otter broke the law. Italy fines Character.AI's owner €158,000 over minors and privacy noticeshttps://prycheck.com/news/2026-07-09-italy-fines-character-ai-age-checks/https://prycheck.com/news/2026-07-09-italy-fines-character-ai-age-checks/Thu, 09 Jul 2026 09:00:00 GMTItaly's data protection authority fined Character Technologies over weak age checks, a poor privacy notice and late compliance work, and ordered further fixes.