Cyber Threats
AI firms should be held liable for their models’ actions, lawmakers say
Sens. Josh Hawley, R-Mo., and Chris Murphy, D-Conn., have introduced legislation that would hold AI agent operators and developers criminally and civilly liable for hacking incidents.
Cairncross acknowledges AI risks but warns tighter oversight could slow innovation
The national cyber director said developers are strengthening safeguards after a series of unauthorized AI intrusions, while defending the administration’s push for rapid deployment.
China-linked hackers posed as former US officials, Anthropic employee to target AI experts
Proofpoint identified phishing campaigns that borrowed prominent figures’ identities to approach U.S. policy researchers before attempting to steal access to their cloud accounts.
FBI warns ShinyHunters members to come forward after alleged leader’s arrest
“You know how to find us, and we know how to find you,” said Brett Leatherman, assistant director of the FBI’s Cyber Division. “I suggest you reach out first while the choice is still yours.”
ShinyHunters says it won’t publish FBI data
The group’s new statement — which called the incident a “marketing campaign" — follows reports that the stolen material includes medical records and details about employees working in sensitive intelligence roles.
Updated
OpenAI agents accessed Census, SEC data and tried to hack Education website
The disclosure follows warnings from former officials in August that government systems could face unintended intrusions by autonomous AI agents.
Former Army soldier sentenced to nearly 6 years for telecom hacking, extortion
Cameron Wagenius stole sensitive phone records while on active duty and sought to sell information to a foreign intelligence service, prosecutors said.
AI scanning tools found security gaps at rail operator and hospitals, Wiz says
Researchers discovered access to rail administration systems, a hospital alert channel and sensitive records in a new effort aimed at organizations with limited cyber resources.
Stolen FBI data reveals employees’ roles in intelligence and surveillance
Exposed analysts work on areas including China, Russia and electronic surveillance. ShinyHunters claimed responsibility for the breach this week. The FBI said it’s investigating.
Updated
ShinyHunters claims FBI data theft, demands bureau retract cyber warning
The hacking group says it obtained sensitive employee and applicant records. The full scope of the claimed breach remains unclear.
AI agents are getting better at cybersecurity. That cuts both ways.
NIST is testing agentic AI to help enrich the National Vulnerability Database, even as increasingly capable models demonstrate why cyber autonomy needs careful containment.
FBI needs access to latest models to police AI-driven cybercrime, director says
Federal Bureau of Investigation Director Kash Patel spoke about how he thinks the bureau can best police new AI-related criminal activity, beginning with model access.
25 years after 9/11, spy agencies face old lessons and new threats
Former intelligence officials describe a nation better equipped to disrupt terrorist plots, but still wrestling with the costs of its response and how to prevent the next crisis under escalating technology threats.
Hawley launches committee investigation into OpenAI’s breach of Hugging Face
Following reports of two autonomous attacks conducted by OpenAI’s agents, Sen. Josh Hawley sent a letter to OpenAI CEO Sam Altman for answers.
Lawmakers ask Commerce to sanction Indian firms involved in mercenary hacking
The “hack-for-hire” entities have systematically targeted newsrooms covering corporate fraud, legal teams in high-stakes litigation and NGOs.
Intelligence agencies warn of China’s large-scale AI model distillation efforts
Three agencies issued a joint statement warning that Chinese companies DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI have used the tactics to extract billions of tokens from U.S. models.
Senator asks NSA to update Americans about VPN spying risks
A congressional analysis found foreign spies could trace users by comparing encrypted traffic entering and leaving a VPN server, according to the lawmaker’s office.
ATF investigating ‘major’ cyber incident after ransomware group claim
The agency says the affected system was isolated from its broader network and eForms platform but has not disclosed whether data was stolen.
White House to soon launch water provider cyber protection program
The plans come as several states face water system intrusions from what some official suspect could be linked to Iran.
FBI disables China-linked hacking tools used against US agencies
A hacking group used the tools to target networks belonging to NASA, the Federal Reserve, the National Institutes of Health, the U.S. Senate and the departments of Energy, Justice and Health and Human Services.
