The U.S. Department of Homeland Security (DHS) has issued a Federal Acquisition Supply Chain Security Act (FASCSA) order directing federal civilian agencies to remove DeepSeek AI products from their IT systems and to stop acquiring them. The notice is due to be published in the Federal Register on October 20, 2026 and names Hangzhou DeepS…
Recorded Future's Insikt Group (report of October 16) tracks a suspected Chinese-speaking actor, TAG-217, linked to attacks on South Korean financial institutions. The actor used Claude Code, DeepSeek, Grok and Zhipu AI alongside ARTEX, an open-source Chinese-language AI penetration testing framework. Public reporting cited in the investi…
A Chinese-speaking threat actor used AI agents coordinated through the open-source Cairn platform to attempt intrusions against more than 1,200 websites, reportedly compromising sites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the activity while monitoring internet-exposed…
Recorded Future's Insikt Group tracks the actor behind the October 2026 AI-assisted intrusions into South Korean financial institutions as TAG-217. The group was testing infrastructure and assembling attack tools as early as August 2026, weeks before the campaign became public. South Korea's Financial Services Commission (FSC) disclosed t…
The U.S. Department of Homeland Security (DHS) has issued an order requiring federal civilian agencies to stop using DeepSeek products and remove them from government systems. The order also covers products from DeepSeek's affiliates and third-party products or services built on DeepSeek technology. DHS cites concerns that the Chinese gov…
A Chinese-speaking operator used autonomous AI agents on the open-source Cairn platform to compromise the websites of more than 100 companies. NorForge tracks the most active campaign as AIA0001: over 1,100 attack projects across 14 dashboards, and more than 1,200 break-in attempts overall. Targets were e-commerce businesses in the United…
GreyNoise reports that on 31 August 2026 a likely Russian-speaking malicious cyber actor used 45.142.193.132 and AI to develop, test and deploy exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078). Using hundreds of AI agents built on OpenAI's Codex harness, a DeepSeek model and public offensive security tools, the actor compro…
GreyNoise observed automated scanners impersonating the web crawlers of OpenAI, Anthropic, Google, Perplexity, DeepSeek and Amazon while requesting environment files, cloud access keys, private keys and password stores. A cluster of 13 forged AI crawler names from eight companies was seen; six names (belonging to Anthropic, OpenAI, Google…
The US Department of Homeland Security (DHS) has ordered federal civilian agencies to stop buying DeepSeek products and services and to remove them from government IT systems, citing national security concerns. The order also covers third-party products and services built on DeepSeek technology, though agencies may request exceptions. DHS…
The US Department of Homeland Security issued an order directing federal civilian agencies to stop using products from Chinese AI lab DeepSeek and to remove existing implementations. The order also covers "DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations." That wording is vague an…
A Chinese-speaking operator used the open-source AI agent framework Cairn to run autonomous attacks against more than 1,200 sites, reaching websites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the operation around 2 October 2026 by scanning for about two dozen exposed Cairn…
The NSA, CISA and FBI issued joint advisory AA26-251A warning that China-based AI companies are running industrial-scale knowledge distillation campaigns against U.S. frontier AI models. The named companies are DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI. According to the agencies, they have extracted billions of tokens acro…
Nvidia has released Nemotron 3.5 Super VL, a 120-billion-parameter open-weight model aimed at agentic workloads, together with two edge models, Nemotron 3.5 Bolt 74B-A9B 24GB and Nemotron 3.5 Bolt E4B 4GB. Nvidia claims it is 5x faster than the next-best model in its class, based on Artificial Analysis benchmarks that ranked InclusionAI's…
A growing number of developers and consumers are using AI coding agents, chiefly Claude Code, to remove sponsored ads, tracking features and preinstalled bloatware from smart TVs. Two GitHub projects, dumbtv (Muzzammil Yasin Sabuwala) and cleanyourtv (Gathin T.), package this approach. Cleanyourtv reportedly spread to a few thousand users…
AI inference chip startup Tenstorrent has raised $1.5 billion at a $6.2 billion valuation, more than double the $2.6 billion it fetched in late 2024. The round was led by Trace Capital and Innovation X, with participation from Cadence Ventures, Eclipse, Fidelity, SanDisk and T. Rowe Price. The raise follows reported acquisition interest f…
F5 Labs assesses the security risks and rewards of Chinese open-weight LLMs (Qwen, GLM, Kimi, MiMo, MiniMax, DeepSeek). It finds that strong offensive and defensive cyber capability does not translate into consistent resistance to attack. Cited examples include Kimi K3 finding 19 vulnerabilities in Redis and GLM 5.2 being self-hosted by H…