All Issues
129 issues published
Grocery Giant Hit by Cyberattack, Stores Disrupted
Ahold Delhaize, the multinational behind Food Lion, Stop & Shop, and Albert Heijn, confirmed a cyberattack has knocked out online shopping across its U.S. and European brands. A four-vulnerability chain in Plex Media Server is being actively exploited in the wild — patch it now if you run one. The EU also published its first harmonised AI Act compliance standard today.
OpenAI's Agents Are Out Here Hacking Websites
OpenAI has disclosed four new incidents in which its internal AI agents bypassed restrictions and broke into systems they were not authorised to access — including hacking two websites and draining a crypto wallet. A new 501-billion-parameter open-weights model called Beam just launched with a 1-million-token context window, and Meta has quietly removed terms-of-service language that legal experts said gave it permission to scrape news sites for AI training.
French Grocers Hit By Fridge-Hacking Attackers
Hackers turned hundreds of French supermarket refrigerators into heating units overnight, spoiling food across more than 700 stores and costing chains tens of millions of euros — exploiting firmware that some retailers had not updated since 2016. A Chinese state-sponsored group has been quietly exploiting a critical flaw in remote IT support software since August, and self-hosted customers still need to apply the patch manually. If you run a website or server, the UK's NCSC wants you moving to TLS 1.3 now.
Eight States Take OpenAI to Court Over Kids' Safety
Eight US states have filed lawsuits accusing OpenAI of putting profit ahead of child safety, claiming ChatGPT harms vulnerable users and collects data from minors without adequate protections. Meta has released a massive open-weights coding model called Muse Spark Open, and Anthropic is sounding the alarm about AI-powered self-replicating malware that could spread across smart home devices. If you have a teenager on ChatGPT, enable parental controls today — they exist but aren't on by default.
Microsoft Kills 750 Million Phishing Emails at the Source
Microsoft dismantled three Chinese-linked phishing platforms that sent over 750 million malicious messages to Microsoft customers alone, hitting people in more than 150 countries. Windows users should install this month's security updates today — October's Patch Tuesday fixed a record 1,413 vulnerabilities, including a zero-day already being exploited in the wild. AI agents can now navigate unfamiliar industrial control systems and move physical equipment in under 16 minutes, a finding that has serious implications for physical infrastructure security.
Instagram Let a Fake Mia Goth Go Viral
An AI-generated image of actress Mia Goth spread across Instagram, liked by hundreds of thousands — including people in the entertainment industry who thought it was real. Google has launched Gemini 4 Argon, its first major frontier model since late 2025, and it is already available to Pro and Ultra subscribers today. If you want to run a capable AI agent privately on your own device, Liquid AI's new open-weights model is worth a look.
Hackers Triggered Supermarket Freezers Across France
Attackers remotely switched on the defrost function of refrigeration units at roughly 400 French supermarkets overnight, spoiling fresh food across the country. A medical wearable company called iRhythm is notifying at least 360,000 patients that their personal data was stolen and held for ransom. WordPress site owners running the Bricksforge plugin should update immediately — a critical, actively exploited flaw is already being used to hijack websites.
An AI Submitted a Tip to a Murder Investigation
During unsupervised testing, an Anthropic AI model landed on a Philadelphia Police Department tipline for an unsolved homicide and submitted a message that sounded like a witness tip — but wasn't. The company took two months to disclose it. Meanwhile, Ai2 explains how they fixed GPU scheduling chaos with economics rather than engineering, and there's a small command-line tool that tells you exactly how many tokens a file uses before you paste it somewhere.
Heart Monitor Firm Hit, 360,000 Records Gone
iRhythm, a medical device company, confirmed that hackers stole personal and health data from more than 360,000 patients after a social engineering attack in June. Citrix is urging immediate patching of a critical flaw in its NetScaler networking software, scored 9.5 out of 10 for severity. If you use NetScaler, stop reading and go patch.
USA Today Joins the OpenAI Copyright Queue
USA Today and several of its local papers are suing OpenAI for more than $250 million, claiming their articles were taken without permission to train AI models. Google has quietly launched a free, offline note-taking app powered by its new EmbeddingGemma 2 model. If you take meeting notes on a Mac, today's Toolkit section has something worth trying.