New Railway says the attacker in its October breach used abliterated models and an ARTEX-like harness, and puts unauthorised AI spend at about $740,000
Railway's incident report says the attacker "exploited a previously unknown vulnerability in our build infrastructure to partially escape filesystem isolation" at 07:28 UTC on October 20, obtaining a build-server credential, and gained a second route at 03:26 UTC on October 21 through "an erroneously defined OIDC binding configuration". Railway puts the reach at "at most, 1.85% (~100,000) of workspaces", says stored histories of 353 builds were read and linked-account tokens of 1,852 users decrypted, among them bring-your-own AI provider keys and GitHub OAuth tokens, and estimates about $740,000 in unauthorised spend. It says the attacker was "specifically targeting AI provider credentials" and used "abliterated models with no safeguards" with "a harness similar to ARTEX, according to Wiz". Railway does not independently attribute the incident and has reported it to the FBI's IC3.
CISA, the FBI, HHS, USDA and the Transportation Department urge operators to take refrigeration and cold-chain controllers off the internet (via Help Net Security)
The joint guidance says attackers have pushed grocery store freezers and cold storage rooms into continuous heating and defrost cycles and tells operators to stop exposing controller panels to the internet; the FBI's Brett Leatherman said such systems are being targeted in several infrastructure sectors around the world.
The FBI attributes the Binance theft to North Korea's TraderTraitor and lists 628 addresses to block
Help Net Security reports that the FBI said in an October 31 alert that North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance, linked it to TraderTraitor, and urged providers to block 628 listed addresses; Binance began restoring withdrawals on November 1 and says it has replaced about 95% of the stolen assets with its own funds.
The FBI and CISA tell election officials that “super intelligence” is making the phishing aimed at them more convincing
Public service announcement I-101626-PSA, issued jointly by the FBI and CISA on October 16 and titled “Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials,” says “the rise in super intelligence (SI) creates additional opportunities for malicious actors” to build larger and more effective phishing campaigns, lets them write convincing messages in native languages and everyday vernacular, and supports “a continuous learning process that improves the effectiveness of automated email messages.” It describes “convincing deepfake video and audio recordings” used to create new identities, steal real people's identities and bolster phishing schemes, and says election officials, candidates and their political organisations are attractive targets for their “access to voter registration data, current government officials, or sensitive campaign information.” It reports that “election officials experienced a surge of phishing attempts” across the last two election cycles and that the FBI saw smishing increase “through encrypted chat applications” within the past year, without quantifying either. Its mitigations ask individuals to use phishing-resistant multi-factor authentication and to examine content for “content credentials or watermarking indicating that it was SI-generated.”
The Justice Department charges an OpenAI engineer over a recorder hidden in an executive conference room, and alleges a linked chatbot account was prompted on building and obfuscating it
The Justice Department said on October 13 that Abdulrahman Alfozan, 35, a Saudi national who had worked as an engineer at OpenAI since July 2025, was arrested on October 9 and charged with “using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications”. The complaint says a recording device was hidden in a USB port on the back of a television in an executive conference room at OpenAI's San Francisco building about September 28, concealed in toilet paper and with its contents encrypted; that OpenAI personnel found it on September 30; and that on October 5 OpenAI security found a second device in a bag he had left unattended, with his wallet and ID. It alleges that a chatbot account sharing several identifiers with his own submitted prompts between September 24 and 30 on “build[ing] a continuous audio recorder” and “encrypt[ing] the SD card”, with prompts on September 27 and 28 referencing that device's custom header and unique MAC address, and that he used a workplace productivity tool before September 28 to ask about building addresses, meeting rooms and executive meeting locations. FBI Director Kash Patel said “Protecting American SI innovation is essential to safeguarding our nation's economic strength.” The charge carries up to five years, a $250,000 fine and three years of supervised release; the allegations are untested.
The Justice Department and the FBI seize seven domains running the scanning and spear-phishing tools a Chinese contractor sold, a day after the advisory naming it
The Justice Department and the FBI said they had seized seven domains — c0cc[.]cc, 98aiblog[.]com, 98aicai[.]com, 98aicode[.]com, outlook3650[.]com, youtubecard[.]com and linkedinns[.]net — used to operate tools run by Integrity Technology Group, the Beijing-based company named in the joint advisory the board carries at October 8. MicroScan is described as a Python-based web tool for reconnaissance and vulnerability scanning carrying “over 1,300 penetration testing scripts” and in use “as early as 2017,” reached by Integrity Tech through c0cc[.]cc; FishHub handled spear-phishing and follow-on payload delivery and, the department says, gave the company's clients “unauthorized remote access to the victim network,” with twenty Taiwanese universities named as confirmed victims of FishHub-related activity; Sparrow is named as the application that controlled the botnet. The target list includes a South Carolina power company, a multinational non-governmental organisation, airports in Japan and Poland, Taiwanese natural gas and power companies, and two Taiwanese universities. Help Net Security adds the dating the seizure announcement did not carry in The Hacker News's account: the Taiwanese energy targets scanned between April and December 2022, the two universities scanned in August 2022 and March 2023 and then breached, and FishHub still being run as of March 2026. FBI Assistant Director Brett Leatherman said the tools “provided China-linked threat actors with capabilities used to conduct widespread vulnerability scanning” and that in seizing them “we make it harder for the PRC to target American networks and infrastructure.” Help Net Security additionally quotes US Attorney Troy Rivetti on “these seizures, our second disruption of Integrity Tech's massive operations in as many years,” and Assistant Attorney General for National Security John A. Eisenberg that “The United States will not allow China or its proxies to operate against United States interests.” An FBI affidavit showed one scanning tool was still reachable as recently as September 9, 2026. Neither department statement as reported names AI or a language model; The Hacker News reports that the UK NCSC, a party to the joint advisory, describes the actors as “uniquely using AI tools, such as automated scanning” alongside large-scale botnets. Reported counts of the devices in the associated botnet differ between the two outlets, so no device figure is quoted here.
NSA and the FBI name a Chinese company as the supplier behind automated scanning and hands-on intrusion against government, manufacturing, healthcare and IT targets
The National Security Agency said on October 8 that it had joined the FBI “and others” in a joint cybersecurity advisory on Integrity Technology Group, a China-based company that it says “has links to the Chinese government” and employs people supporting malicious cyber activity, published “to provide at-risk organizations with the information necessary to proactively defend their networks.” NSA says Integrity Tech has enabled threat actors to target organisations in sectors including government, critical manufacturing, healthcare and information technology, and that some of those actors use tactics consistent with activity tracked as Flax Typhoon, Storm 919, Ethereal Panda and Red Juliett; it directs organisations to “review the TTPs and indicators of compromise outlined in this report.” The advisory, numbered AA26-281A, is titled for actors who combine automated and hands-on hacking tools; the NSA release names no tool and no CVE. cisa.gov and ic3.gov could not be opened here, so nothing is quoted from the advisory itself and no AI or large-language-model component is asserted.
The FBI and the Secret Service say the FortiBleed credential campaign is still running, and that attackers are locking administrators out of their own firewalls
A joint FBI and US Secret Service advisory released on Tuesday October 6, carried here through Help Net Security, says the FortiBleed campaign against internet-facing Fortinet FortiGate firewalls and SSL VPN gateways is ongoing. Attackers scan for exposed SSL VPN portals, then use credential stuffing, password spraying and GPU hash cracking with Hashcat and Hashtopolis; they create new accounts on compromised devices for persistence and in some cases delete existing ones, which can lock an organisation out of its own firewall and leave recovery needing “remediation steps beyond standard patching and password resets.” Access is sold on to affiliates of the INC/Lynx and Payload ransomware operations. The scale figure the advisory carries — more than 86,644 compromised devices across 194 countries — is attributed in it to the security firm SOCRadar rather than counted by the agencies, and the advisory PDF at ic3.gov could not be opened here, so neither that attribution nor the AI-tooling claim a second outlet drew from the same document is asserted on this card.
CISA and the FBI say a compromised US automation firm handed actors customers' SCADA data
In a joint product for critical-infrastructure operators working with third-party ICS integrators, CISA and the FBI describe actors who compromised a US industrial automation company serving utilities and transportation entities between March and April 2025, "searched terms, including 'customers' and 'SCADA,'" and "created nine .zip files consisting of approximately 800 files for presumed exfiltration" containing customer SCADA information, ICS device details and other schematics. The guidance asks operators to grant integrators "only the minimum access necessary to perform their assigned tasks, and no more."
Coast Guard and FBI cyber teams boarded two Texas-bound tankers after attacks on their systems at sea
Rear Adm. Amy Grable, commander of Coast Guard Cyber Command, said investigators who boarded the Liberian-flagged crude tanker VL Prosperity on August 21 “did find malicious cyber activity”; a second Texas-bound tanker was also boarded, and the US is investigating whether the attacks are linked. Iranian state media claimed hackers reached the ship's propulsion, navigation and cargo systems and cut communications for 30 hours from August 7; the US has not attributed the attacks, and the Coast Guard found no evidence the ship had become unsafe to navigate (via CBS News).
The Chinese Communist Party's own newspaper rejects the US distillation allegations and warns of countermeasures
A People's Daily commentary rejected the US allegation that Chinese AI companies ran industrial-scale distillation against American frontier models as “without factual or legal basis,” accused Washington of “politicising” a normal technical and commercial practice, and said Beijing would take “countermeasures” if the allegation were used as a pretext to suppress Chinese companies' development. The allegation was made in the September 8 NSA/CISA/FBI joint advisory that named six Chinese labs; China's commerce ministry rejected it on September 10, and the Party newspaper's commentary lands ahead of a Xi–Trump meeting expected on September 24.
Anthropic names seven China-based AI companies it says ran industrial-scale distillation against Claude
The Hacker News, reading Anthropic's September 2026 misuse report, says the company attributes illicit distillation campaigns to seven China-based labs and gives each a tracking identifier: Alibaba (GTG-16005), Moonshot AI (GTG-16002), DeepSeek (GTG-16001), Zhipu/Z.ai (GTG-16006), Xiaomi (GTG-16008), SenseTime (GTG-16012) and MiniMax (GTG-16003). It reports 151 million exchanges attributed to Alibaba from more than 3,500 fraudulent accounts between May and July 2026, 23 million to Moonshot from 5,380 accounts over the same window with almost 300,000 customer requests relayed in ten days, and more than 12.1 million to DeepSeek over 14 days in July. Five of the seven — Alibaba, Moonshot, DeepSeek, Z.ai and MiniMax — also appear in the September 8 NSA/CISA/FBI advisory; Xiaomi and SenseTime do not, and StepFun, which the advisory names, is not among Anthropic's seven.
NSA, CISA and FBI name six China-based AI companies running industrial-scale distillation campaigns against US frontier models
The joint advisory says DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI “extracted billions of tokens across millions of exchanges/requests from U.S. frontier AI models” — naming the Claude, GPT, Gemini and Grok families — “since at least late 2024,” routed through a gray market of API proxies the advisory calls “transfer stations,” which resell frontier-model access below official prices, and through pools of accounts running concurrent sessions with load distribution. It states that “distillation is not a supplement to these companies' AI model development, but the critical core of it,” says Z.AI distilled “billions of tokens of GPT-5.5 data and Claude Opus 4.8 data,” and calls DeepSeek's publicly quoted $5.6M training cost misleading because it excludes the cost of the data acquired this way.
FBI, NSA and Cyber National Mission Force say a China-linked group has been integrating AI into its operations
A joint advisory attributes the group it tracks as QTFY to Nanjing Xinjiuwei Network Technology Co. and describes malicious distributed platforms used against defense industrial base, communications, government, higher education, energy, information technology and water and wastewater targets. The advisory states the actors “have also been observed heavily researching and integrating AI into their processes over the last two years.”
US agencies warn attackers are using AI-generated scripts to target Siemens S7 industrial controllers
A joint advisory (AA26-231A) from the NSA, CISA, FBI, DOE and EPA warned that threat actors are running persistent reconnaissance and capability development against internet-exposed Siemens S7 programmable logic controllers with weak or default credentials, and are using AI-assisted development to rapidly iterate exploit code — including AI-generated Python scripts that call the snap7.dll library to read PLC memory and configuration. The agencies called it an active threat rather than a theoretical risk and listed critical manufacturing, energy, water and wastewater, chemical, food and agriculture, and commercial facilities as targeted sectors; no threat actor was attributed.
FBI and EPA alert on actors targeting internet-facing water-sector PLCs across at least seven states
The FBI issued an alert stating that since 27 July 2026 at least seven states have reported incidents in which malicious cyber actors changed IP addresses and passwords on internet-facing Rockwell Automation/Allen-Bradley MicroLogix 1100 and 1400 PLCs at water and wastewater utilities, causing loss of monitoring and control functionality, with operational impacts including loss of pressure and flooding. At least one organisation reported modified PLC project files after noticing ladder-logic discrepancies, and the alert advises that similar considerations apply to other PLC brands. The alert names no actor, state or country. Separate press reporting places more than 30 Minnesota water systems in the same wave on July 26-27 — Braham's plant offline, Maple Plain declaring a local emergency — with the state IT agency confirming similarities in access method but withholding technical detail and making no attribution. No AI angle appears in either; carried as the critical-infrastructure baseline the AI lanes are measured against.
Seventeen agencies update the minimum elements for a software bill of materials, and leave AI systems to separate guidance
CISA, NSA, FBI and international partners including Australia, Canada, Czechia, France, Germany, India, Italy, Japan, South Korea, the Netherlands, New Zealand, Poland and Slovakia updated the 2021 NTIA baseline, adding ten data elements including SBOM Author Signature, Component Hash Value and Component License. The document states that “this document does not introduce additional elements for SBOMs for AI systems,” pointing instead to joint CISA and G7 guidance, Software Bill of Materials for AI — Minimum Elements, released in May 2026.
US advisory: Iran-linked actors manipulating Rockwell, Siemens and Schneider PLCs
A US government advisory (CISA/FBI/NSA/EPA), updated July 22, warns Iran-linked actors are using vendors' own engineering software to alter project files on Rockwell, Siemens (S7-1200) and Schneider (Modicon M340) PLCs — disabling shutdown and alarm logic at US water, energy and government facilities, with at least one confirmed US victim. No direct AI angle, but a strategically significant critical-infrastructure escalation.