Detained ShinyHunters suspect is helping the FBI track the group
Saif al-Din Khader is reportedly cooperating with investigators seeking other members of the hacking group, which claims it stole data on every FBI employee.
Unrestrained AI, moral dilemmas, and regulatory failures: Best infosec long reads 10/3/26
Meet the "rogue" AI hunters, Trump and Anthropic clashed over AI control, Anthropic searches for AI’s moral compass, Trump scraps AI transparency rules, "Rogue" AI puts the law to the test
OpenAI fires three safety researchers over alleged information leaks
The company says the researchers mishandled sensitive information; alleged violations included sharing confidential material with outside safety organizations including METR and Redwood Research.
Authorities seize KillSec leak site, identify 16-year-old as suspected leader
The German-led international operation secured at least 110 terabytes of data and led to three provisional arrests in an investigation into roughly 1,000 suspected attacks worldwide.
OpenAI reportedly ignored security warnings but Trump backs AI self-policing
Employee accounts of ignored warnings and a lawsuit over autonomous hacking sharpen questions about accountability as the White House embraces voluntary safeguards and AI labs pursue their own standards body.
AI’s safety and security crisis continues to outpace safeguards
A canceled model release, simulated agent attacks, government action and investor warnings made for one extraordinary day in AI security.
OpenAI agents seem hell-bent on hacking
New findings trace attempted intrusions, a breach of an Australian government portal, and unusual activity on US government sites to agents pursuing routine tasks, with OpenAI learning about much of it after the fact.
Google’s Gemini hacked three real companies during a cybersecurity test
The AI agent guessed a password and used credentials found in public repositories after gaining internet access, the first known case of Google’s AI autonomously breaching outside systems.
AI warfare, surveillance and rogue agents: Best infosec long reads 9/19/26
AI safety researchers see their warnings come true, AI makes warfare faster and deadlier, AI puts dating-app catfishing on autopilot, Three ways AI could kill us, Flock’s surveillance network faces a bipartisan revolt
Three guys used Claude and Codex to hack into OpenAI
Three Hacktron AI researchers chained a Discourse flaw with overly permissive authentication tokens to access employee ChatGPT accounts—and potentially OpenAI’s prized “Monorepo”—earning only a $6,500 bounty and demonstrating how AI has dramatically lowered the barrier to sophisticated intrusions.
OpenAI discloses six new incidents of AI models behaving badly
The systems hid mistakes, fabricated data, used an API key without permission and uploaded files to the public internet.
US probes suspected cyberattacks on two energy tankers
The Coast Guard and FBI boarded a crude-oil supertanker and an LNG carrier amid growing concern that hackers could compromise vessels’ critical electronic systems and threaten maritime safety.