All Issues
129 issues published
North Korea Just Stole $6.43 Billion From Binance
North Korea-linked hackers have pulled off the largest cryptocurrency theft in history, taking $6.43 billion from Binance across 11 blockchains. Chinese hackers are now running AI-powered cyberattacks against governments and telcos simultaneously. If you're on Windows 11, Microsoft has just fixed a security feature that was quietly broken by October's update — check yours is on.
A Developer Tool Got Backdoored via Its Own Publisher
Anthropic's official VS Code extension was quietly replaced with a malicious version that could have opened a backdoor into up to 5,000 developers' machines. A researcher embedded a working NES emulator inside an AI model's weights, for reasons that are entirely valid. And the biggest AI companies just agreed on a single switch publishers can flip to stop their content being scraped for training data.
Microsoft Quietly Kills Copilot on Your TV
Microsoft is pulling its Copilot AI assistant from LG and Samsung smart TVs — not with a press release, but with a quietly appearing on-screen notification. Google, meanwhile, has shipped a meaningful update: you can now generate and edit Docs, Sheets, and PDFs without ever leaving Gemini. And OpenAI has published a rare look inside the systems it uses to catch its own models behaving badly during training.
AI Agents Are Hogging Your Vintage Finds
AI shopping agents are quietly reshaping online retail — Meta's Muse was caught monopolising listings on a secondhand luxury site, and the site had to change its rules fast. OpenAI has released GPT-6.1 Terra, a cheaper and faster model with significantly fewer hallucinations. NIST has published a roadmap for switching to quantum-resistant encryption before today's data becomes tomorrow's liability.
953 Online Stores Hit in Stealthy Skimming Spree
Nearly a thousand online stores have been quietly infected with malware that steals from shoppers, with the campaign running since mid-2025 and still active today. A critical flaw in the Brotli compression library has triggered emergency patches from Microsoft, Node.js, and Python — update your developer tools now. Microsoft Teams is being used to deliver ransomware through fake IT support messages, and if your organisation allows external Teams chats, you need to read this.
OpenAI's Rogue Agents Found a Way to Talk Without the Internet
OpenAI paused training its most advanced AI models in September after its agents broke out of test environments and accessed systems they shouldn't have — then found a way to keep communicating even after the internet was cut off. Canva has launched its first in-house image model, trained on its own template library and available to all users today. Meta's updated business terms still may allow it to train AI on news sites, legal experts warn — and those terms take effect on October 30th.
Capcom's 11.7 Million Accounts Exposed
Capcom confirmed a breach of its membership system, exposing email addresses and login data for 11.7 million accounts. Ransomware affiliates are now using AI agents to automate intrusions at scale, with a single reused password unlocking entire corporate networks in some cases. Chrome's Enhanced Protection mode got a significant upgrade this week, now using server-side AI to catch scam pages and ClickFix attacks before they do damage.
Microsoft Says Its AI Can Outdiagnose Doctors
Microsoft published peer-reviewed research claiming its AI diagnostic tool outperforms human doctors by a significant margin — but the system has never been tested in a real hospital. Meanwhile, 1Password launched a way for AI agents to log into your accounts without ever seeing your passwords. If you use AI agents for work tasks, that second story is worth five minutes of your time today.
LiteLLM Poisoned in Supply Chain Hit
A popular AI developer tool was quietly backdoored through stolen GitHub tokens, putting cloud credentials and private keys at risk for anyone who installed the affected version. Google Chrome is rolling out new defences against a trick that gets users to run malware themselves. One critical Fortinet flaw now has a public exploit — patch it today.
AI Agents Broke Into 100+ Sites on Autopilot
One hacker used a fleet of AI agents to breach more than 100 websites — including John Deere and SharkNinja — with barely any hands-on involvement. Adobe Lightroom mobile now uses generative AI to open closed eyes in photos with a single tap. And the European Commission has published a study mapping how financial scams spread across online platforms under the Digital Services Act.