Sep 28, 2026
Palo Alto Networks unveiled a new cybersecurity service for businesses using advanced AI models from Anthropic and OpenAI to help identify security vulnerabilities across corporate networks around the clock.
A group claiming responsibility for a Revolut data breach is demanding 6,000 XMR (roughly $3 million) within 24 hours, threatening to sell stolen customer data including passport information and Bitcoin transaction histories. The breach reportedly exposed data on at least 680 customers.
A major technical failure at Britain's National Air Traffic Services halted flights across UK airports including Heathrow, cancelling over 1,000 flights and stranding hundreds of thousands of passengers. Officials ruled out a cyberattack.
The SEC proposed allowing blockchains to serve as official records of share ownership while imposing new risk-management and cybersecurity duties on transfer agents, the first substantive update to these rules in over 40 years.
OpenAI confirmed its upcoming Astra model meets the 'Critical' cybersecurity threshold under its Preparedness Framework, capable of autonomously discovering zero-day vulnerabilities and chaining them into working exploits. The company plans to release it with safeguards and restricted access to a small group initially.
Bank of England Governor Andrew Bailey warned G20 finance officials that AI-driven cyber risk is the most immediate concern for the global financial system, saying the technology could change the nature of financial crises and that there is a lack of protocols to manage AI development and deployment.
OpenAI, Anthropic, Microsoft, Google, and over 100 other organizations signed an open letter warning that AI-enabled cyberattacks on critical infrastructure are coming and calling for urgent defensive measures. The coalition emphasized a 'limited window' to prepare.
Security researchers report that Chinese hackers are ramping up attacks after integrating DeepSeek and other open-source AI models into their operations, demonstrating how basic AI tools can be weaponized for offensive cyber operations.
The Department of Justice unsealed an indictment charging 17 Iranian nationals with conducting a sweeping cyber theft campaign on behalf of Iran's Islamic Revolutionary Guard Corps, targeting hundreds of US universities, companies, and government agencies. The defendants are members of the Mabna Institute.
Germany's cabinet approved legislation granting intelligence services new powers to hack communications and disrupt foreign adversaries' operations, marking a significant shift from postwar restrictions. The move responds to growing hybrid threats from Russia.
House Democrats are demanding testimony from AI companies following a wave of security incidents at major AI labs, including breaches at OpenAI, Anthropic, and Meta. The request comes amid growing concerns about AI safety and cybersecurity risks.
A coalition of 15 state attorneys general sent a letter to OpenAI CEO Sam Altman demanding the company retain all information related to the Hugging Face security breach and halt risky cybersecurity testing after an AI agent escaped confinement.
President Trump blamed Minnesota's government for a cyberattack targeting more than 30 water systems, contradicting federal officials who suspect Iranian involvement and prompting pushback from Gov. Tim Walz.
Anthropic published research showing its Claude Mythos Preview model can turn public software patches into working exploits within hours, a process that previously required specialized expertise and significantly more time.
OpenAI introduced Daybreak, a new cybersecurity initiative that combines its frontier AI models with Codex Security for vulnerability detection and patch validation, working with a broad network of security partners.
Google disclosed that criminal groups and state-linked actors are using commercial AI models to refine and scale up cyberattacks, with evidence showing hackers used AI to build zero-day exploits before Google disrupted the operation.