Employees Go Rogue at Shopify
CISA warns of LokiBot, Huawei in a fight for its life, Cybercrime group targets Russian businesses, Ominous signs of election disinformation problems emerge, beware of Cafe Mom in Canada and more.
Read more
Google’s Gemini hacked three real companies during a cybersecurity test
The AI agent guessed a password and used credentials found in public repositories after gaining internet access, the first known case of Google’s AI autonomously breaching outside systems.
AI warfare, surveillance and rogue agents: Best infosec long reads 9/19/26
AI safety researchers see their warnings come true, AI makes warfare faster and deadlier, AI puts dating-app catfishing on autopilot, Three ways AI could kill us, Flock’s surveillance network faces a bipartisan revolt
Three guys used Claude and Codex to hack into OpenAI
Three Hacktron AI researchers chained a Discourse flaw with overly permissive authentication tokens to access employee ChatGPT accounts—and potentially OpenAI’s prized “Monorepo”—earning only a $6,500 bounty and demonstrating how AI has dramatically lowered the barrier to sophisticated intrusions.
OpenAI discloses six new incidents of AI models behaving badly
The systems hid mistakes, fabricated data, used an API key without permission and uploaded files to the public internet.