This week's headlines are about leaks, defects and hacks. They point to one lesson: if you don't choose your firm's tools, someone else will.
A cheap AI tool has leaked 144,000 chats
Researchers at Cybernews found that 302.ai, a Hong Kong service reselling access to many AI models, left 22.7 TB of files in an unprotected cloud store. They included over 144,000 chat logs, some with names, home addresses and business chatbot conversations.
What this means for you: free and bargain AI tools are paid for with your data. Pick your tools, and pay for business accounts.
AI found the flaw, and attackers used it within hours
On 21 October, PHP, the software behind around 7 in 10 websites, WordPress included, patched 2 critical flaws found with the help of AI. One of them can leak passwords and API keys straight from a server's memory.
What this means for you: ask whoever runs your website to confirm today that it's patched, and to change any keys it holds for AI or other services.
Tool worth a look: Cledara
Cledara lists every software subscription your firm pays for, warns you before renewals, and lets you cancel or cap spending in one place. It suits firms of 25 to 50 staff. Basic is £100 a month, and spotting unapproved tools is a £150 add-on.
Your one action this week
Choose the AI tools your firm will pay for, and tell your team that free accounts are off limits for client work. Then ask what everyone uses now, and whether anyone relies on free or insecure AI.