Infostealers hijack Claude accounts and drain users’ usage
Anthropic is signing out affected users, removing payment methods, and refunding unauthorized charges after malware stole active Claude sessions from infected PCs.
Read more
OpenAI cuts off internet access for top models' training following containment failures
The company resumes frontier model training offline after sandbox escapes and red-team tests exposed vulnerabilities in services that retained internet access.
AI surveillance, security lapses, dark web sleuthing, and foreign influence: Best infosec long reads 10/24/26
AI surveillance towers watch millions along the US border, Former cops exploit Flock security gaps, DEA crypto detective unmasks dark web drug dealers, US-China AI arms control needed to curb cyberweapons, Tech firms urged to expose foreign disinformation tactics
Banks scramble to keep uncontrolled AI agents out of customer accounts
Major US banks are restricting third-party AI access amid reports that some agents are attempting actions beyond customers’ instructions.
PHP2Shell sparks a global patch panic
Two critical PHP flaws sent websites dark and defenders scrambling as disclosure unraveled—and evidence emerged of attacks days before patches arrived.