Cybersecurity News in Asia

LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Psst… know anyone interested in selling his/her identity?

      Psst… know anyone interested in selling his/her identity?

      Tuesday, October 7, 2025, 10:30 AM Asia/Singapore | Features
    • Featured

      When failure is not an option

      When failure is not an option

      Monday, October 6, 2025, 3:02 PM Asia/Singapore | Features, Newsletter
    • Featured

      Fragmented data, fractured trust

      Fragmented data, fractured trust

      Tuesday, September 30, 2025, 3:09 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

Cyber experts warn of privacy and security risks as AI gains default access to messaging apps

By CybersecAsia editors | Tuesday, July 22, 2025, 4:08 PM Asia/Singapore

Cyber experts warn of privacy and security risks as AI gains default access to messaging apps

Industry voices urge users to adopt strong cyber hygiene amid the granting of data permissions to AI assistants.

In July 2025, Google rolled out an update for its Gemini AI assistant on Android devices, enabling it by default to interact with data from popular third-party apps — including WhatsApp.

This new capability has sparked privacy and security concerns, drawing online commentary from experts across the cybersecurity industry.

According to one spokesperson from Huntress, “this default ‘App Content’ permission fundamentally weakens Android’s security model. Granting Gemini broad access to third-party app data without explicit user consent creates a high-risk attack surface. If compromised in any way, malicious actors could exploit this pathway to harvest sensitive information, ranging from banking details to private messages.” Broad permissions and lack of clear controls could allow attackers to use AI as a gateway to other apps and data, highlighting the need for tighter app-based consent boundaries.

Check Point Software’s spokesperson has commented: “Attackers are likely to target Gemini first, as compromising it could serve as a gateway to access other applications and services on a mobile device. The potential for access to sensitive data is a significant concern; mobile devices are rich sources of personal information that users highly value. Additionally, app metadata may be collected and fed into the model without clear transparency.” Functions with over-allocated permissions could allow actions they may never have been explicitly approved by users to any installed apps.

Marc Rivero, Lead Security Researcher, Kaspersky, has also spoken out against the move: “Private messaging apps are among the most sensitive digital spaces for users as they contain intimate conversations, personal data, and potentially confidential information. Granting an AI tool automatic access to these messages without clear, explicit consent fundamentally undermines user trust. While Google says this feature is designed to make interactions more seamless, the lack of transparency and the opt-out rather than opt-in approach could potentially leave many users unaware that their private chats are being processed by an AI system.”

Until sufficient outcries succeed in putting a stop to this development, users are advised to follow some available interim methods, as well as foundation best practices in cyber- and privacy- hygiene.

Share:

PreviousThe rising threats and business risks of machine identities
NextCloud4C Unveils Advanced AI-powered Cybersecurity Innovations in Cambodia, Amidst Rising Cyberattacks in the Country

Related Posts

How can we rid the world of passwords? Here are seven perspectives

How can we rid the world of passwords? Here are seven perspectives

Thursday, May 4, 2023

Continued pandemic increases complexity of networks, risks: study

Continued pandemic increases complexity of networks, risks: study

Tuesday, October 19, 2021

Supply chain attacks at the software development level: what you need to know

Supply chain attacks at the software development level: what you need to know

Thursday, October 27, 2022

Explosion of malicious domains set up in the Cloud to exploit pandemic fears

Explosion of malicious domains set up in the Cloud to exploit pandemic fears

Wednesday, May 6, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • HOSTWAY gains 73% operational efficiency for private cloud operations  

    HOSTWAY gains 73% operational efficiency for private cloud operations  

    With NetApp storage solutions, the Korean managed cloud service provider offers a lean, intelligent architecture, …Read more
  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more
  • PT Kereta Api Indonesia announces nationwide email and communication overhaul

    PT Kereta Api Indonesia announces nationwide email and communication overhaul

    The state railway operator’s upgraded email system improves privacy, operational reliability, and regulatory alignment for …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.