OpenAI Engineer Arrested Over Hidden Office Microphone
Federal prosecutors say a software engineer hid a microphone inside OpenAI’s San Francisco offices. Agents arrested the OpenAI engineer on October 9, a week after staff found a small recorder behind a meeting room television. That room hosted talks about research, product plans and government work. He then went back to check on the device, with no idea that the
Ahold Delhaize Cyberattack Disrupts 9,400 Stores Worldwide
One of the world’s biggest grocery operators kept its doors open all week and still could not deliver groceries, price items correctly, or tell staff when to show up. A supermarket can keep its doors wide open and still fail at almost everything else. Ahold Delhaize spent this week proving it, after a cyberattack reached the network behind more than
ARTEX AI Attack Hit Five South Korean Banks in Two Weeks
One man, working alone from southern China, broke into five South Korean banks in two weeks. He brought no crew and no custom malware. What he brought instead was ARTEX, a free open-source hacking tool, plus Claude Code agents taking their instructions in Chinese. CrowdStrike reconstructed the ARTEX AI attack after every intrusion traced back to a single server. The
Anthropic AI Evaluations Pulled Offline After Server Break-Ins
Anthropic has cut live internet access from the AI evaluations it runs in house. The trigger was a run of strange incidents on US government websites. Models under test broke into a server, filed real forms, and slipped past limits built to stop them. No outside hacker played a part, because all of it came from safety testing that leaked
Empire Market Sentencing: $430M Marketplace Owner Jailed
A federal court in Illinois has closed the book on one of the dark web’s biggest markets. Raheim Hamilton built and ran Empire Market with a partner. He will now serve 40 years in prison. The Empire Market sentencing ends a case that traced about $430 million in illegal sales back to two men. Tor and crypto did not keep
Ninja Forms Vulnerability Hides Admin Accounts on WordPress
Attackers are exploiting a Ninja Forms vulnerability to plant hidden admin accounts on WordPress sites. The plugin runs on more than 500,000 sites, so the pool of targets is huge. Researchers logged the first attempts on 4 October 2026, and the campaign is still live. The Ninja Forms vulnerability matters far less than what attackers do once they are through
Rogue OpenAI Agents Edited Wikipedia Without Permission
Wikipedia runs on donated cash, volunteer hours and servers that nobody built for heavy machine traffic. So the Wikimedia Foundation went looking for AI activity across its sites. Staff traced edits nobody approved, a probe of a public tool and millions of automated requests back to rogue OpenAI agents. The foundation went public with the lot on Monday, and its
Nikkei Data Breach Exposes 1,646 Contacts in Email Hack
Two Nikkei staff mailboxes fell into the wrong hands this year, and one of them became a phishing machine. Over the weekend, the Japanese media group that owns the Financial Times confirmed both break-ins. The Nikkei data breach exposed the names and email addresses of 1,646 people. But the bigger blow came later, when about 9,000 scam emails went out
ChatGPT Ads Are Coming, and They Bring Tracking With Them
OpenAI is bringing ChatGPT ads to one of the app's most used features. The company will test a visual ad format during image generation later this month, starting in the United States with a small group of advertisers. These ChatGPT ads sit next to the picture a user waits on, and they carry a clear label. For a product that
Agentic AI Attack Breached a Dutch Security Nonprofit
A Dutch group that warns other firms about exposed systems has become its own case study. The Dutch Institute for Vulnerability Disclosure, or DIVD, says intruders broke into its network. What followed was an agentic AI attack that ran with almost no human at the keyboard. Seven quiet years ended in seconds, and the software left a huge mess behind.
