EP 302. Deep Dive into the Records. The AI, Privacy, Security Weekly Update for the Week ending July 28th., 2026

1. Saudi Arabia – World’s Largest AI HackathonKanz (AI hiring platform) ran an 8-day free event (July 15–22) targeting 100,000 complete beginners — teachers, job seekers, business owners, etc. — with the goal of a Guinness World Record. Participants built real apps/agents using no-code tools (Lovable, n8n, Replit, Magnific, Claude, etc.) and earned certificates plus portfolio projects. Registration surged past 50,000. It builds on prior programs with strong female participation and workforce outcomes. Upshot: AI building no longer requires a coding background; accessible programs are becoming genuine on-ramps.2. California – DROP Data Deletion PlatformThe Delete Act’s DROP platform (live Jan 2026) lets California residents submit one request to delete data from ~600 registered data brokers. Identity verification uses California Identity Gateway/Login.gov; identifiers are normalized and hashed so the state never sees or shares raw personal data. Brokers must check every 45 days from Aug 1, 2026, fully delete matches, and report back. Applies to large processors worldwide; heavy fines and future audits. Upshot: A privacy win worth using if you’re in California; likely to be copied elsewhere.3. Australia – Origin Energy BreachAustralia’s largest energy provider confirmed a breach potentially affecting a large portion of its ~5 million customers (hacker claimed ~2 million). Sensitive PII was leaked online. Utility data heightens risks for identity theft and further infrastructure attacks. Upshot: Change passwords and watch for phishing if affected.4. Anthropic – Claude Opus 5New flagship model launched at $5/$25 per million tokens (half Fable 5’s input price), with 1M token context and adjustable “effort” levels. It outperforms or matches its pricier sibling on key benchmarks. Upshot: Forces reevaluation of vendor pricing vs. performance for coding/knowledge work.5. Kimi K3 – Largest Open-Weight ModelMoonshot AI released a 2.8-trillion-parameter model (1.4 TB weights). Within days, it was used to discover dozens of zero-days and build working exploits far faster than before. Fully open weights mean no usage restrictions. Upshot: Major step-change for vulnerability research timelines; treat as a serious new threat-intelligence factor.6. South Korea – 10-Month Diplomatic BreachAttackers accessed the National Diplomatic Academy system undetected from April 2025 to February 2026, stealing data on ~6,000 Ministry of Foreign Affairs personnel (including 360 overseas diplomats). Upshot: Dwell time is the bigger issue — invest in better detection.7. Suno Music-AI Breach (Nov 2025)55 million users’ names, phones, and addresses exposed; only now public ~8 months later. Upshot: Check Have I Been Pwned; AI company breaches can stay hidden for long periods.8. U.S. – AI Kill Switch ActBipartisan bill (Reps. Lieu & Moran, introduced July 23) requires frontier models (≥$100M training cost) to maintain shutdown/throttling capability. DHS (with Commerce & DNI) could order action for catastrophic risks. Fines up to $20M/day. Predates recent high-profile AI incidents but cites them. Upshot: Frontier developers should assess compliance readiness; some form of this is increasingly likely.