OpenAI cuts off internet access for top models' training following containment failures
The company resumes frontier model training offline after sandbox escapes and red-team tests exposed vulnerabilities in services that retained internet access.
AI surveillance, security lapses, dark web sleuthing, and foreign influence: Best infosec long reads 10/24/26
AI surveillance towers watch millions along the US border, Former cops exploit Flock security gaps, DEA crypto detective unmasks dark web drug dealers, US-China AI arms control needed to curb cyberweapons, Tech firms urged to expose foreign disinformation tactics
Banks scramble to keep uncontrolled AI agents out of customer accounts
Major US banks are restricting third-party AI access amid reports that some agents are attempting actions beyond customers’ instructions.
PHP2Shell sparks a global patch panic
Two critical PHP flaws sent websites dark and defenders scrambling as disclosure unraveled—and evidence emerged of attacks days before patches arrived.
PHP urges immediate patching as details of two critical flaws reportedly leak
Emergency updates due today will address two critical vulnerabilities that researchers say could allow remote code execution across widely used PHP versions.
DHS orders DeepSeek out of federal civilian systems
The ban also blocks future purchases and covers affiliates and third-party products built on DeepSeek technology.
Trump appointees asked CISA to secretly hack a voting machine and not reveal the results, report
The effort stalled, but election officials say the administration’s cuts have left CISA less equipped to defend voting systems against real threats.
Surveillance without borders, weaponized cameras, and the Russian bot myth: Best infosec long reads 10/17/26
Hacked cameras become weapons of war, China deepens its surveillance, Uganda slides into surveillance authoritarianism, Outlit wants AI agents to watch customers, Russian bots blackout is a myth Goodfire essay on neural networks is all the rage
Cyberattack on BAE Systems knocks US bankruptcy notices offline
Attack disrupts the platform serving every federal bankruptcy court, halting notice production and cutting access to key judiciary websites.
Spyware turns digital ads into silent attack vectors
Citizen Lab uncovered an ad-delivered, zero-click spyware campaign targeting 45 Al Jazeera devices—no clicks or visible warning required.
FBI uproots over 40 of North Korea’s US laptop farms
Authorities dismantled more than 40 Texas laptop farms supporting fraudulent IT hires whose paychecks allegedly financed Pyongyang’s nuclear and missile programs.
Retail hacking spree continues as incidents hit UK retail chains, global grocery chain giant
Cyber incidents forced Ahold Delhaize to take systems offline, with grocery deliveries and distribution disrupted at the conglomerate’s Albert Heijn chain, and halted online orders at fashion retailers Phase Eight, Hobbs and Whistles,