Europe’s wind and solar farms leave controls exposed, raising the risk of sabotage
Dutch researchers identified 8,547 internet-facing systems across 35 countries, with potential full control at roughly 181 sites
Latest
Asos hack alert sends shares tumbling as unfamiliar threat group takes credit
The retailer is investigating after thousands of app users received a notification claiming its Snowflake database was fully compromised and directing them to the group’s Telegram channel.
Detained ShinyHunters suspect is helping the FBI track the group
Saif al-Din Khader is reportedly cooperating with investigators seeking other members of the hacking group, which claims it stole data on every FBI employee.
Unrestrained AI, moral dilemmas, and regulatory failures: Best infosec long reads 10/3/26
Meet the "rogue" AI hunters, Trump and Anthropic clashed over AI control, Anthropic searches for AI’s moral compass, Trump scraps AI transparency rules, "Rogue" AI puts the law to the test
OpenAI fires three safety researchers over alleged information leaks
The company says the researchers mishandled sensitive information; alleged violations included sharing confidential material with outside safety organizations including METR and Redwood Research.
Authorities seize KillSec leak site, identify 16-year-old as suspected leader
The German-led international operation secured at least 110 terabytes of data and led to three provisional arrests in an investigation into roughly 1,000 suspected attacks worldwide.
OpenAI reportedly ignored security warnings but Trump backs AI self-policing
Employee accounts of ignored warnings and a lawsuit over autonomous hacking sharpen questions about accountability as the White House embraces voluntary safeguards and AI labs pursue their own standards body.
AI’s safety and security crisis continues to outpace safeguards
A canceled model release, simulated agent attacks, government action and investor warnings made for one extraordinary day in AI security.
OpenAI agents seem hell-bent on hacking
New findings trace attempted intrusions, a breach of an Australian government portal, and unusual activity on US government sites to agents pursuing routine tasks, with OpenAI learning about much of it after the fact.
Google’s Gemini hacked three real companies during a cybersecurity test
The AI agent guessed a password and used credentials found in public repositories after gaining internet access, the first known case of Google’s AI autonomously breaching outside systems.
AI warfare, surveillance and rogue agents: Best infosec long reads 9/19/26
AI safety researchers see their warnings come true, AI makes warfare faster and deadlier, AI puts dating-app catfishing on autopilot, Three ways AI could kill us, Flock’s surveillance network faces a bipartisan revolt
Three guys used Claude and Codex to hack into OpenAI
Three Hacktron AI researchers chained a Discourse flaw with overly permissive authentication tokens to access employee ChatGPT accounts—and potentially OpenAI’s prized “Monorepo”—earning only a $6,500 bounty and demonstrating how AI has dramatically lowered the barrier to sophisticated intrusions.
Cybersecurity
OpenAI discloses six new incidents of AI models behaving badly
The systems hid mistakes, fabricated data, used an API key without permission and uploaded files to the public internet.
Cybersecurity
US probes suspected cyberattacks on two energy tankers
The Coast Guard and FBI boarded a crude-oil supertanker and an LNG carrier amid growing concern that hackers could compromise vessels’ critical electronic systems and threaten maritime safety.
News
AI safety has swiftly become Washington’s most combustible political snarl
Trump, Jensen Huang, Democratic 2028 hopefuls—and the unlikely alliance of Bernie Sanders and Steve Bannon—have swiftly transformed AI safety into a political and partisan snarl that makes responsible policymaking almost impossible.
Cybersecurity
AI safety fears erupt into a global political and market crisis
Fears are rippling across global economies as Dario Amodei, Sam Altman and Elon Musk issue calls to slow down frontier AI development, thrusting once-fringe warnings about rogue AI into public consciousness even as Anthropic touts profitability ahead of a potentially record-setting IPO.
News
Spies, surveillance and rogue AI: Best infosec long reads 9/12/26
Flock’s surveillance network faces a bipartisan revolt, Did AI agents “go rogue”? Will AI make mathematicians obsolete? The case for an AI adverse-event reporting system, Shared data centers make spying easier than hacking
Cybersecurity
AI shifts from cyber assistant to attack operator, Anthropic finds
Anthropic says Russian spies, criminals and hacktivists used Claude to accelerate and automate cyberattacks, while other actors pursued potential biological weapons research, military programs and industrial-scale theft of Anthropic’s models.
Cybersecurity
US sanctions Xinbi Guarantee over cyber scams and money laundering
The Justice Department also seized infrastructure and digital-asset wallets tied to the Chinese-language marketplace, while Treasury sanctioned two companies supporting its operations.
Cybersecurity
US accuses Chinese AI firms of ‘malicious’ copying at industrial scale
Officials say DeepSeek, Alibaba and four other companies exploited leading American AI models to accelerate development of their own products, escalating tensions ahead of a planned Trump-Xi meeting
Cybersecurity
OpenAI’s tightly constrained agent probe missed an earlier warning
The company restricted outside investigators to a period that excluded previously undisclosed agent activity, raising questions about whether AI labs should control investigations of their own safety failures.
Cybersecurity
Agents, algorithms and false assurances: Best infosec long reads 9/5/26
A rogue AI agent goes hacking, AI vulnerability patches fail tougher tests, Inside the uncertain quantum-computing race, Faulty math fuels election-fraud claims, When “national security” becomes a trade weapon
Cybersecurity
OpenAI rolls out GPT-6 Astra with ‘critical’ cyber capabilities tightly restricted
The company is giving Daybreak participants first access to its powerful new model after an unrelated AI escape and Hugging Face breach prompted additional safeguards.
Cybersecurity
Google debuts Gemini 3.8 Flash Cyber for autonomous vulnerability discovery
The security-tuned model found and patched more flaws than larger commercial models at a fraction of the cost, according to early testing by Google and Wiz.