Ransomware is Now Killing People
Plus Iranian hackers charged, Iranian groups sanctioned, Russians charged with defrauding cryptocurrency exchanges, DOE cybersecurity official leaving
Read more
Google’s Gemini hacked three real companies during a cybersecurity test
The AI agent guessed a password and used credentials found in public repositories after gaining internet access, the first known case of Google’s AI autonomously breaching outside systems.
AI warfare, surveillance and rogue agents: Best infosec long reads 9/19/26
AI safety researchers see their warnings come true, AI makes warfare faster and deadlier, AI puts dating-app catfishing on autopilot, Three ways AI could kill us, Flock’s surveillance network faces a bipartisan revolt
Three guys used Claude and Codex to hack into OpenAI
Three Hacktron AI researchers chained a Discourse flaw with overly permissive authentication tokens to access employee ChatGPT accounts—and potentially OpenAI’s prized “Monorepo”—earning only a $6,500 bounty and demonstrating how AI has dramatically lowered the barrier to sophisticated intrusions.
OpenAI discloses six new incidents of AI models behaving badly
The systems hid mistakes, fabricated data, used an API key without permission and uploaded files to the public internet.