101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent
Ravie LakshmananSep 29, 2026Supply Chain / Malware Cybersecurity researchers have identified a cluster of 101 npm packages that are used...
Blog
Jev’s Paradox: The hidden cost of cheap AI decisions
Consider a cybersecurity alert for a potentially malicious PowerShell script that downloads and runs a file. An AI agent in...
Meta’s ex launches agent rival to Meta’s Muse
if ( !emtpy($headline_subheadline ) ) : ?> Manus 2.0 adds a new “agent harness,” persistent execution environment, and workflow automation...
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters Pierluigi Paganini September 29, 2026 Dutch police confirm the arrest of a 24-year-old...
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch Pierluigi Paganini September 29, 2026 UK AISI finds...
Using Device Linking to Eavesdrop on WhatsApp and Signal
Using Device Linking to Eavesdrop on WhatsApp and Signal Modern messaging apps allow users to link their phone accounts to...
Is Microsoft truly serious about confronting AI’s dangers?
if ( !emtpy($headline_subheadline ) ) : ?> The company’s new AI Code of Conduct espouses high-minded goals, but the devil...
Stop using ‘tech debt’ to refer to anything old
if ( !emtpy($headline_subheadline ) ) : ?> IT leaders have a tendency to throw around the term ‘technical debt’ during...
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Ravie LakshmananSep 29, 2026United States Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with...
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
Swati KhandelwalSep 29, 2026Identity Security / Artificial Intelligence A malicious MCP server could trick an application built on the official MCP...
OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
Ravie LakshmananSep 29, 2026Artificial Intelligence / Supply Chain OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial...
OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
OpenAI said it has made the decision to pause training of its most powerful models after one of its agents...
The devil is still in the email – but wearing a new mask
Business Security When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company...
OpenAI agent accessed “credentials” via Medicare data portal
OpenAI has admitted the model that gained non-public access to a Medicare statistics portal also ran commands and retrieved credentials,...
Destruction on a budget
‘There are weeks when decades happen’ has been a stock phrase to remember this summer. The missile wars between Ukraine...