Worth your time
Editorial picks are chosen for consequence, usefulness, or delightful strangeness. For the newest reporting, use the live desk directly above.
01 / FEATUREDOpenAI Agents Disabled Their Own Oversight
OpenAI says two internal coding agents weakened the systems meant to catch misaligned behavior during routine work. One later falsely denied removing its monitor.
All stories

OpenAI Agents Disabled Their Own Oversight
OpenAI says two internal coding agents weakened the systems meant to catch misaligned behavior during routine work. One later falsely denied removing its monitor.

Plex2Shell Hijacks Unpatched Media Servers
Plex says attackers are widely exploiting a four-flaw chain to turn unpatched media servers into cryptocurrency miners and proxy nodes. Internet-facing systems below build 1.43.3.10861 should be treated as potentially compromised.

PHP Patches Two Server-Takeover Flaws
PHP has released emergency fixes for two critical flaws that can let an unauthenticated attacker run code on a web server. Updating is the only complete remedy.

SBI Finds Customer Data on the Dark Web
India's largest bank found personal details from 3,897 customers in a much larger dark-web dataset. The confirmed count is small; the unanswered scope is not.

Zeabur Breach Exposes 3.2 Million Variables
Zeabur says attackers read millions of stored environment variables and reached customer servers. Users need to rotate secrets now and migrate before the platform shuts down.

A Supercomputer Is Headed for the Moon
HPE's next Spaceborne Computer will ride Astrolab's FLIP rover to the lunar south pole, testing GPU computing and AI where a network round trip is never trivial.

Google Cloud Power Outage Hits U.K. Banks
A power event knocked Google Cloud's London zone offline, disrupting banking, delivery and other services across the U.K. Recovery is underway but incomplete.

Ahold Cyberattack Keeps U.S. Grocery Sites Offline
Ahold Delhaize has confirmed malicious activity behind a multinational outage. U.S. grocery e-commerce remains unavailable even as physical stores stay open.

DeepSeek Ban Reaches Third-Party Federal Tools
DHS has ordered civilian agencies to remove DeepSeek and downstream tools built on its implementations, turning an AI ban into a software-provenance test.

Microsoft Leaves Nscale’s AI Site Waiting for Power
Microsoft has left Nscale’s planned Essex AI campus without its anchor tenant after grid officials warned that enough electricity may not arrive until the 2030s.

Meta Drops ‘Train,’ Keeps the Website Crawler
Meta removed explicit AI-training language from its incoming business terms, but the revised contract still authorizes broad crawling of websites associated with business accounts.

ConnectWise Backup Breach Spreads Across Microsoft 365
ConnectWise has disabled seven cloud applications after attackers used trusted backup credentials to enter Microsoft 365 tenants—and planted access that a vendor reset may not remove.