October 2026
OpenAI’s wandering AI agents earn it a California subpoena
Plus: Attorneys-general say investigators should have direct access to AI companies' records when things go wrong
Fortinet sounds the alarm over actively exploited FortiMail zero-day
No login required, exploitation underway, and some admins are still waiting for patches
AI agents hacked the hackers, stealing email addresses from security research org
Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds
EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank
RUSI wants procurement rethink that could put US suppliers under scrutiny too
Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
Your invite to a fake AI policy advisory committee has strings attached
Microsoft catches hackers exploiting Zimbra bug before disclosure
Attackers were probing the mail server flaw weeks before it had a CVE to its name
MI5 warns UK academics their research may have helped Chinese spies
Institutions told to trace who is really financing their work or risk falling foul of national security law
CISO thought he had a ‘r3@lg00dp@$$w0rd’ but forgot to patch
Replacing letters with symbols still doesn’t make it good.