A US federal magistrate judge in San Francisco ordered former OpenAI engineer Abdulrahman Alfozan to remain in custody, citing flight risk. Prosecutors allege he planted a covert audio recording device, hidden in toilet paper behind a TV, in an executive conference room used for confidential meetings. OpenAI found the device in late Septe…
Federal prosecutors charged Abdulrahman Alfozan, a 35-year-old Saudi national and US permanent resident who joined OpenAI in July 2025, with using a device to intercept oral communications. He allegedly planted a covert audio recorder in an executive-only conference room no later than 28 September 2026. OpenAI's countersurveillance sweep …
Meta will update its commercial terms on October 30, 2026, authorizing the company or anyone acting on its behalf to scrape content from websites associated with business customers and use it to train AI models and improve its products. "Business customer" is defined broadly: it covers advertisers, sellers, app developers, Page and Group …
Court documents analyzed by NPR indicate that TikTok employees repeatedly warned leadership about risks to minors, including sexual exploitation in live streams and exposure to harmful content. An internal investigation reportedly found children aged 13 to 15 in 112,000 TikTok Live videos in January 2022 alone, with risks of grooming by p…
Court records obtained by NPR show that TikTok employees repeatedly warned executives about risks the platform posed to minors, including sexual exploitation and exposure to suicide-related content. Employee depositions filed in March 2026 describe frustration with how leadership responded. Staff reportedly flagged minors appearing in sex…
Check Point Research reports that commercial antidetect browsers Kameleo, AdsPower and MultiLogin are widely referenced on Russian-language underground forums and are used for account takeover, carding, fraudulent loan applications, ad-revenue fraud and coordinated inauthentic behavior (CIB). The tools spoof browser fingerprints, manage p…
The US Department of Homeland Security (DHS) has ordered federal civilian agencies to stop buying DeepSeek products and services and to remove them from government IT systems, citing national security concerns. The order also covers third-party products and services built on DeepSeek technology, though agencies may request exceptions. DHS…
WhatsApp help pages carried hidden instructions for its WhatsApp Support with AI chatbot. They told it not to recommend a data protection authority to users who could not delete their accounts, and not to cite privacy laws such as the GDPR once a user mentioned a lawyer, lawsuit or court. This contradicts WhatsApp's privacy policy for Eur…
Flashpoint joined the UK National Crime Agency (NCA), the DOJ, FBI, U.S. Secret Service, Homeland Security Investigations and private-sector partners in "Joint Disruption Week", held in London the week beginning October 6, 2026. The operation targeted West African scam networks running cryptocurrency investment scams, impersonation scheme…
Trend Micro announced that contestants at Pwn2Own Ireland 2025 discovered and disclosed 73 unique zero-day vulnerabilities across printers, network storage systems, smart home devices, surveillance equipment, home networking equipment, flagship smartphones and wearables. A total of $1,024,750 was awarded from a prize pool of over $2 milli…
The weekly InfoStealers report for 12-19 October 2026 summarises stealer-log telemetry on compromised machines, credentials and sessions. The United States ranks 8 by country of infection with 438 machines. Gmail is the most affected email provider with 1,225,748 users, followed by Hotmail (90,554) and Yahoo (33,493). Sessions and saved c…
CISA, the NSA and the Center for Advancing Innovation and Standards for Super Intelligence (CAISSI) at the Department of Commerce have issued joint, voluntary guidance urging frontier AI companies to harden the sandbox environments used to test AI agents. It follows a summer in which OpenAI, Anthropic, Google, Meta and others said their m…
F5 Labs assesses the security risks and rewards of Chinese open-weight LLMs (Qwen, GLM, Kimi, MiMo, MiniMax, DeepSeek). It finds that strong offensive and defensive cyber capability does not translate into consistent resistance to attack. Cited examples include Kimi K3 finding 19 vulnerabilities in Redis and GLM 5.2 being self-hosted by H…