• A Windscribe update from July 2026 appears to credit AI engine Fable for identifying necessary fixes
• The AI audit successfully spotted complex vulnerabilities across the provider's Windows, macOS, and Linux applications.
• Rival providers remain seriously apprehensive of the technology, warning of the possible consequences of error.

Windscribe appears to have quietly revealed that it used artificial intelligence to audit its software.

Hidden within the changelog for release 2.33.11, deployed on July 6, 2026, the company mentions that the update includes security fixes stemming directly from an AI review by Fable 5, an advanced AI model developed by Anthropic.

Should this be true, it’d be the first instance of a commercial VPN provider relying on a large language model to conduct a comprehensive security evaluation of its core infrastructure.

What did the Fable 5 audit find?

A closer look at the release notes shows that the Fable 5 audit successfully identified highly technical areas for improvement, helping developers secure the app against potential local attacks and data leaks.

According to Windscribe, the update includes "App hardening from the Fable 5 audit, including WireGuard key validation, Control D API key log redaction, IPC exposure hardening, safer logging, installer argument redaction, and package/dependency handling fixes."

In simpler terms, the audit identified several ways to secure how the VPN handles encryption keys for the popular WireGuard protocol and ensure that sensitive API keys aren’t accidentally saved in the software's error logs.

It also identified how Windscribe could tighten up how different parts of the application communicate with each other (known as IPC exposure), which stops bad actors from exploiting the app locally on your device.

The changelog also lists a staggering number of accompanying fixes deployed in this same update. Windscribe patched a "DLL planting vulnerability" in its Windows bootstrapper, a flaw where malicious code could be loaded in place of a legitimate file, and resolved a local privilege escalation vulnerability on Linux.

Will AI replace human audits?

Historically, VPN providers undergo independent, third-party audits to prove they do not keep logs of user activity or harbor hidden security flaws.

While an AI like Anthropic's Fable 5 can process vast amounts of code rapidly, its use raises new questions about transparency.

Can an AI audit provide the same level of assurance as a human expert? Rival providers are highly skeptical about completely handing the reins over to machines.

Speaking to TechRadar, Tomas Stamulis, CSO at Surfshark, explained that while the company uses AI models internally to spot vulnerabilities "at a scale and speed impossible for humans," formal public audits still require a human touch.

"We currently rely on independent, qualified auditors, such as Deloitte or Cure53, for our formal audits," Stamulis told us. "We strongly believe that independent validation requires external human oversight to maintain contextual analysis and ensure reliability."

Stamulis warned that relying entirely on an AI for external validation carries unique risks, particularly regarding how these language models are fed information.

He noted that "given the risk that AI findings could be manipulated through context and prompting, human-led independent oversight remains the only way to provide the level of contextual analysis and manipulation-proof assurance that authorities and customers expect."

We are still waiting to hear back from Windscribe regarding their decision to prioritize an AI-driven approach for this specific update.

However, as the industry continues bolstering protections against advanced threats, AI auditing, whether used internally or publicly, represents the next major evolution in digital privacy.

• Andy Yen, founder and CEO of Proton, takes the 27th Liberal Award
• JFZH cites his record on privacy, start-ups, and tech sovereignty
• The November 12 ceremony coincides with Switzerland’s second surveillance consultation

Andy Yen, founder and CEO of Proton, has won the 2026 Liberal Award.

The prize is handed out each year by the Jungfreisinnige Kanton Zürich (JFZH), the Young Liberals of the Canton of Zurich, to someone judged to have made a significant contribution to a liberal society.

His company is best known for its privacy suite: Proton Mail, Proton VPN – one of the best VPN services on the market – along with Proton Drive and Proton Pass. The JFZH credits Yen with building a European alternative to the major US tech platforms, and with making the case for privacy at a time when Swiss surveillance rules are back in play.

From CERN to a 100-million-user company

Yen’s route into tech ran through physics. He holds a PhD in particle physics from Harvard and worked as a research scientist at CERN in Geneva before turning to building Proton, which is headquartered in the same city.

The company now employs more than 700 people, 60 of them in the Canton of Zurich, and says it serves over 100 million customers worldwide. It’s majority-owned by the non-profit Proton Foundation – a structure Proton presents as a safeguard against the pressures that typically come with venture capital.

“Andy Yen stands up for what matters to us as well: the right to privacy and the presumption of innocence instead of blanket suspicion,” said Mikhail Shalaev, president of the JFZH. “He champions better conditions so that start-ups can grow from Switzerland. And Proton is building in Europe the key technologies that will allow our continent to remain self-determined in the future.”

An award tied to a surveillance debate

The JFZH is explicit about the timing. Switzerland’s Federal Council plans to revise the Ordinance on the Surveillance of Postal and Telecommunications Traffic (VÜPF), a move critics warn could introduce indiscriminate mass surveillance through mandatory data retention.

The revised ordinance was overwhelmingly rejected in the first public consultation. The Federal Council has since commissioned a regulatory impact assessment and scheduled a second consultation for November 2026.

“The Federal Council must protect privacy instead of risking an exodus of our most innovative tech companies,” Shalaev added.

What happens next

Yen joins past recipients including media entrepreneur Roger Schawinski, former federal councillors Pascal Couchepin, Kaspar Villiger, and Guy Parmelin, the Swiss Institute for Economic Policy (IWP), and Argentina’s deregulation minister Federico Sturzenegger.

The ceremony takes place on Thursday, November 12 2026 at Westhive in Zurich.

For Proton, the timing matters as much as the recognition. The company has spent years arguing that Europe needs its own privacy infrastructure rather than relying on US providers – a case the JFZH is making, and one that lands harder while the Federal Council debates data retention.

• The UK government wants more Apple Pay alternatives for consumers
• It’s proposing opening the technology up to other companies
• It also wants Apple to charge lower fees for access

If you pay for an item using the contactless tech on any of the best iPhones, you’re locked into Apple’s way of doing things. But the UK government’s competition regulator — the Competition and Markets Authority (CMA) — is proposing new rules that could blast open the way you pay using your iPhone.

According to a press release on the UK government website, the CMA believes that “Apple’s fees and rules are blocking UK fintechs and other businesses from innovating and growing” and that its proposed changes are “expected to result in substantially lower access fees, helping make it commercially viable for more businesses to innovate and compete.”

The CMA pointed out that no rivals to Apple Pay exist in the UK, as opposed to in the EU, where several alternatives can be used. The CMA believes this is due to both high fees charged by Apple and restrictions placed on certain technology by the Cupertino giant.

For instance, while Apple allowed third-party companies to offer Apple Pay alternatives in the UK back in 2024, one condition was that these firms had to use Apple’s Secure Element, which encrypts important payment card information during transactions.

In the EU, however, European Union-wide rules mean that Apple must let companies use host card emulation (HCE) for free instead of the Secure Element, if they wish. The CMA wants that kind of technology to be available in the UK and says it does not believe that doing so would raise any “inherent security concerns.”

Commenting on the CMA’s move, Mattias Eld, CEO & Co-founder at contactless firm Fidesmo, said: “Buying an iPhone should not mean handing Apple the keys to your wallet. Consumers should rightly choose how they pay, and banks should choose who they work with. But for over a decade Apple has honed its domination over tap-to-pay, through the careful and deliberate stifling of its competitors. This has allowed Apple to charge banks inflated transaction fees, with the threat of exclusion from such a vast market leaving them little choice but to pay.”

Apple pushes back

The CMA says that while it isn’t seeking to dictate the prices or terms that Apple must set, it wants to propose “principles for how this should be determined, with the expectation that charges would be substantially lower than Apple’s current fees while still fairly rewarding Apple for providing access.”

However, Apple has pushed back against the CMA’s proposals, telling Reuters that “We do not believe the CMA should require ​Apple to adopt an approach with lower privacy and security protections. We will continue to engage constructively to reach ​an outcome that is in the best interest of our users.”

Why does Apple restrict access to contactless payment tech? One answer might simply lie in the almighty dollar: as with the App Store, Apple charges third-party firms for access and likely doesn’t want to give up that revenue stream.

I’m not entirely convinced that that’s the main reason, however — after all, Apple is one of the wealthiest companies on the planet and makes huge profit margins on every product it sells. Is nickel and diming really such a core strategy when its iPhone revenue alone jumped 21% to $54.25 billion in the third quarter of 2026?

Analysis: Apple fears it could pay the price

To me, a stronger argument centers on something else: control. This has been an obsession for the company since the days of Steve Jobs, and Apple is acutely, painfully sensitive to how its products are perceived.

If Apple loosened its grip on something so vital to the user experience as payments and financial services and a third-party contactless provider then got hacked or scammed customers, Apple fears that that will reflect badly on itself as a company. For the perfectionists at Apple, anything that lessens the user experience due to Apple’s actions is an absolute no-go. By taking payments entirely under its own aegis, Apple reassures itself that nothing will go wrong.

There’s a degree of logic to that. Apple has proven its security credentials and works harder than many companies to keep its systems incredibly safe. Going with a third-party means trusting someone else whose track record might not be as strong. But that certainly doesn’t mean that only Apple can safeguard your payment information — or indeed that only Apple should be allowed to even try.

If the CMA gets its way, Apple might be forced to change its ways. The company has already been forced to crack open its contactless walled garden in the EU, and the UK might soon follow. The way you pay using your phone might look very different as a result.