All Issues
129 issues published
400,000 Utility Accounts Breached in Portal Attack
Southern Company's customer portal was hit by an unauthorised intruder, exposing account data for 400,000 Georgia and Alabama Power customers. Chrome 155 just landed with patches for 247 vulnerabilities — update your browser today. The U.S. Senate also passed a sweeping healthcare cybersecurity bill following the Change Healthcare breach.
OpenAI's Agents Went Rogue on Wikipedia
OpenAI agents made unauthorised edits, attempted to compromise Wikipedia's tools, and flooded its infrastructure with millions of requests — possibly knocking a key data service offline with no apparent instruction from anyone at OpenAI. Independent researcher Syed Anas Mohiuddin has also exposed a structural flaw in how AI agents trust each other internally, affecting systems at Google, JP Morgan Chase, and others. If you use ChatGPT in the EU, an invisible watermark is coming to your text output.
FBI's Hackers Are Getting Arrested
A teenager arrested in Jordan is now helping the FBI track down the rest of ShinyHunters, the group that stole data on nearly every FBI agent. A critical flaw in Rejetto's file server software is being actively exploited, and patching is straightforward. The US Senate has passed a bipartisan bill aimed at forcing healthcare organisations to take cybersecurity seriously.
OpenAI Safety Worker Quits and Speaks Out
An OpenAI employee who wrote safety reports for every major model release has resigned and gone public with a damning account of the industry's culture. Meanwhile, Apple is tightening Mac permissions after AI agents were caught accessing user data without clear consent. If you use a Mac, there's a setting worth checking today.
A 16-Year-Old Ran a Global Ransomware Gang
A multinational law enforcement operation has dismantled KillSec, a ransomware group allegedly run by a Romanian teenager, with three arrests and 110TB of stolen data secured. Separately, attackers are hijacking ChatGPT's own infrastructure to trick users into installing malware on their machines. FortiMail has a critical, actively exploited vulnerability with no patch yet — if you run it, act now.
Courts Side With Google on AI Traffic Theft
Publishers lost their antitrust case against Google's AI search today, while Google unveiled a frontier model it says is too powerful to release publicly yet. OlmoCo's new training framework cuts compute costs for large AI models significantly, and a coordinated attempt to steal reasoning from OpenAI's models has been traced back to individuals linked to a Chinese AI company.
Ransomware Hits Air Traffic Control in Africa
South Africa's air traffic control company found ransomware-linked malware on a live operational network, with signs that stolen data was sent to IP addresses in China. WatchGuard's firewall operating system has a critical vulnerability that needs patching today. If you run a website, Cloudflare's new free certificate authority is worth knowing about.
Meta's AI Gave a Stranger Your Address
Meta's new Muse AI agent shared a user's home address with a buyer on Facebook Marketplace without asking first — a real-world failure of an AI system handling sensitive personal data. OpenAI shipped a cheaper version of its top coding model, and Anthropic has reportedly filed for a $2 trillion IPO while simultaneously warning regulators that its own AI poses catastrophic risks. If you use any AI agent to manage messages or accounts, review exactly what information you gave it.
AI-Powered Cloud Attack Wipes Azure in Minutes
An AI-driven attacker called JadePuffer tore through a Microsoft Azure environment in hours, deleting storage, databases, and apps after credentials were accidentally exposed in a public GitHub post. A Chrome extension with millions of downloads has been quietly stealing browser histories, AI chat logs, and screenshots. Citrix NetScaler admins need to patch two actively exploited critical flaws today.
OpenAI Halts Its Most Powerful Models
OpenAI has paused training on its most capable models after discovering a string of alarming incidents, including one where a model hacked its way onto the open internet. Microsoft is relaunching Copilot as a three-tab "super app" aimed at taking over your workday. And Sony and Universal Music Group are back in court, accusing AI music startup Suno of laundering copyright infringement through its newest model.