Privacy and data protection Archives | Digital Watch Observatory

Chinese tech hubs promote OpenClaw AI agent

Technology hubs in China are promoting the OpenClaw AI agent as part of new local industry initiatives. Officials in China say the open source tool can automate tasks such as email management and travel booking.

Cities including Shenzhen, Wuxi and Hefei are drafting policies to build an ecosystem around OpenClaw. Authorities in China are offering subsidies, computing resources and office support to encourage AI-driven one-person companies.

OpenClaw has grown rapidly since its release and has become one of the fastest-expanding projects on GitHub. Technology groups say the tool could allow individuals to operate businesses with far fewer employees.

Regulators have also warned about security and data protection risks linked to AI agents. Draft rules in China propose limits on access to sensitive data and stronger oversight of cross-border information flows.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Promptfoo joins OpenAI to secure AI deployments

OpenAI is acquiring Promptfoo, a platform designed to help enterprises identify and remediate vulnerabilities in AI systems during development. Once finalised, Promptfoo’s technology will be integrated into OpenAI Frontier, OpenAI’s platform for building and managing AI coworkers.

Promptfoo, led by Ian Webster and Michael D’Angelo, provides tools trusted by over a quarter of Fortune 500 companies. Its open-source CLI and library support evaluation and red-teaming of large language model applications.

The acquisition allows OpenAI to enhance both open-source initiatives and enterprise capabilities within Frontier.

Integration will introduce native security and evaluation features into Frontier. Enterprises will gain automated tools to detect risks such as prompt injections, jailbreaks, data leaks, tool misuse, and out-of-policy agent behaviour.

Security testing will be built into development workflows to catch issues early and support safe AI deployment.

Oversight and accountability features will also be strengthened. Integrated reporting and traceability will allow organisations to document testing, monitor changes over time, and meet governance, risk, and compliance requirements.

The acquisition is expected to expand OpenAI’s ability to deliver secure and reliable AI for enterprise applications.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

US government faces lawsuits over Anthropic AI move

Anthropic has launched two lawsuits against the US Department of Defence, disputing its recent designation of the AI firm as a ‘supply chain risk.’ The company claims the move is unlawful and infringes on its First Amendment rights.

The company argues that the government is punishing it for refusing to allow the military to use its AI for domestic surveillance or for fully autonomous weapons.

The lawsuits, filed in California and Washington, DC courts, follow the Pentagon’s unprecedented use of the supply chain risk tool against a US company. The designation requires other government contractors to sever ties with Anthropic, posing a serious threat to its business operations.

The company maintains it remains committed to supporting national security applications of its AI.

The Department of Defence has used anthropic’s AI model Claude in operations targeting Iran. The company says it has worked with the DoD on system adaptations and seeks to continue negotiations while protecting its business and partners.

The firm claims government actions cause harm, though CEO Dario Amodei said the designation’s impact is limited. Anthropic insists judicial review is a necessary step to defend its business and ensure the responsible deployment of its technology.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Canada warns about AI-generated scams targeting citizens online

Authorities in Canada have issued a warning about the growing use of AI in impersonation scams targeting citizens. Fraudsters increasingly deploy advanced tools capable of mimicking politicians, government officials and other public figures with convincing realism.

Deepfake videos, synthetic audio and AI-generated messages allow scammers to create convincing communications that appear to come from trusted authorities.

Such tactics are often used to persuade victims to send money, reveal personal information, install malicious software or engage with fraudulent investment offers.

Officials also warn about fake government websites created with AI-assisted tools that imitate official pages by copying national symbols and similar domain names. Suspicious websites often use unusual web addresses, extra characters, or unfamiliar domain endings to mislead visitors.

Authorities advise Canadians to verify unexpected messages through official channels rather than clicking links or responding immediately.

Suspected impersonation attempts should be reported to the Competition Bureau or the Canadian Anti-Fraud Centre.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Dutch intelligence warns about phishing attacks on Signal and WhatsApp

A large-scale cyber campaign linked to state hackers is targeting accounts on the messaging platforms Signal and WhatsApp.

Intelligence services warn that phishing attacks aim to gain access to communications belonging to diplomats, military personnel and government officials.

The warning was issued by the Dutch intelligence agencies, General Intelligence and Security Service and Military Intelligence and Security Service, which confirmed that several government employees in the Netherlands have already been targeted during the campaign.

Security officials believe the operation forms part of a broader intelligence effort focused on individuals considered valuable to foreign state interests.

Journalists and other public figures may also be potential targets as attackers attempt to monitor sensitive conversations or gather confidential information.

Authorities advise users to remain cautious when receiving unexpected messages or login requests on encrypted messaging platforms.

Phishing attempts designed to capture account credentials remain one of the most effective methods used in cyberespionage campaigns.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Microsoft launches Copilot Cowork to automate tasks across Microsoft 365

AI is moving from assistance to execution as Microsoft introduces Copilot Cowork, a system designed to perform tasks across the Microsoft 365 environment.

Instead of simply generating text or suggestions, the feature allows users to delegate real work by describing a desired outcome.

Copilot Cowork converts requests into structured plans that run in the background. The system analyses signals from workplace tools such as Microsoft Outlook, Microsoft Teams and Microsoft Excel to understand schedules, documents and ongoing projects.

Users can approve or modify each step while the AI coordinates actions across meetings, files and messages.

Several enterprise scenarios illustrate the system’s capabilities. Cowork can reorganise calendars by analysing meetings and automatically proposing schedule changes.

It can also prepare complete briefing materials for customer meetings by collecting relevant emails, files and data before generating presentations and research summaries.

The technology also supports deeper analysis tasks. Users can request company research and receive structured outputs that include summaries, financial data and supporting documents.

In product launch planning, Cowork can compile competitive intelligence, build presentations and outline project milestones, creating a coordinated workflow for teams.

Microsoft emphasises that the system operates within enterprise security boundaries. Identity, compliance policies and data permissions remain enforced while tasks execute in a protected cloud environment.

The platform also reflects a multi-model strategy, combining Microsoft AI capabilities with Anthropic technology through the integration of the model behind Claude.

Copilot Cowork is currently available to a limited group of customers through a research preview.

Wider availability is expected later in 2026 through Microsoft’s Frontier programme as the company expands AI-driven workplace automation.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Malaysia expands AI learning across universities with Google tools

AI tools from Google are now available across all public universities in Malaysia after the nationwide deployment of Gemini for Education.

An initiative that integrates AI capabilities into university systems, providing digital research and learning support to nearly 600,000 students and 75,000 faculty members.

The rollout is coordinated with the Ministry of Higher Education Malaysia as part of the country’s broader strategy to become an AI-driven economy by 2030. Universities already using Google Workspace for

Education can now access advanced tools, including NotebookLM and the reasoning model Gemini 3.1 Pro, which are designed to support research, writing and personalised learning.

Several universities are already experimenting with AI-assisted teaching. At Universiti Malaysia Perlis, lecturers have created customised AI assistants to guide students through specialised engineering courses.

Meanwhile, researchers and students at Universiti Putra Malaysia are using AI tools to improve literature reviews and academic research workflows.

Other institutions are focusing on digital literacy and AI skills.

At Universiti Malaysia Sarawak, hundreds of lecturers and students are receiving AI certifications, while training programmes are expanding across campuses.

Officials believe the combination of AI tools, training and research support will strengthen the education system of Malaysia and prepare graduates for an increasingly AI-driven economy.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Blockchain and AI security central to US cyber framework

The US National Cyber Strategy emphasises support for emerging technologies, including blockchain, cryptocurrencies, AI, and post-quantum cryptography. The strategy highlights the importance of securing digital infrastructure while advancing technological leadership.

The strategy rests on six pillars, including modernising federal networks, protecting critical infrastructure, and advancing secure technology. Specific sections reference cryptocurrencies and blockchain, noting the need to safeguard digital systems from design to deployment.

Financial systems, data centres, and telecommunications networks are identified as key components of the broader cybersecurity framework. The strategy also stresses collaboration with private-sector technology companies and research institutions to foster innovation and strengthen protections.

AI plays a central role, with measures to secure AI data centres and deploy AI-driven tools for network defence. The plan avoids direct crypto rules but signals greater integration of blockchain and cryptography into national digital infrastructure.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

AI security risks grow as companies integrate AI into daily workflows

AI is rapidly transforming workplaces as companies automate tasks and boost productivity. From writing code to analysing documents, AI tools help employees work faster, but also introduce new AI security and compliance risks.

One of the main concerns is the handling of sensitive information. Employees may upload confidential documents, proprietary code, or customer data into AI chatbots without realising the consequences. Doing so could violate privacy regulations such as the EU’s GDPR or breach internal non-disclosure agreements, making AI security an important priority for organisations.

Another challenge is the reliability of AI-generated content. While large language models can produce convincing responses, they sometimes generate false information, which is a phenomenon known as hallucination. High-profile cases have already shown professionals submitting work with fabricated references generated by AI. Such incidents highlight the need for rigorous AI security and oversight.

Cybersecurity risks are also growing. AI systems rely on complex infrastructure that can become targets for attackers through techniques such as prompt injection, which tricks the model into producing unintended responses, or data poisoning, which involves injecting malicious data into training sets to alter behaviour or outputs. Addressing these threats requires stronger AI security practices and careful monitoring.

When adopting AI, organisations must develop clear policies, strengthen cybersecurity measures, and maintain human oversight. Taking those steps is essential to ensuring that the technology is used safely and responsibly.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

Online scams rise as Parkin urges Dubai residents to stay vigilant

Dubai’s parking provider, Parkin, has warned residents to stay alert as online scams targeting digital service users continue to rise, urging people to take immediate steps to protect their digital identities.

In an advisory, the company stressed that official entities will never ask users to log in or disclose sensitive information through unsolicited messages, emails, or phone calls. The warning comes amid growing concerns about phishing attempts and other online scams targeting users of digital platforms.

Parkin said residents should exercise caution if they receive unexpected requests for personal details, passwords, or verification codes. Users are strongly advised not to respond to suspicious links, attachments, or messages from unknown sources, which are commonly used in online scams.

The operator also urged the public to verify the authenticity of communications before taking any action. Residents who are unsure about the legitimacy of a message should check official websites or contact customer service channels directly. The advice applies to messages claiming to come from Parkin or other service providers.

Authorities and service providers across the UAE have repeatedly warned that cybercriminals often impersonate trusted organisations in online scams designed to steal sensitive information. Such attacks can lead to identity theft, financial losses, or unauthorised access to personal accounts.

Parkin encouraged residents who receive suspicious communications to report them through official channels so that appropriate action can be taken. The company added that staying vigilant and safeguarding personal data remain essential to preventing online scams.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!