Law enforcement in Jordan has reportedly detained a suspected member of the ShinyHunters extortion group known as “Rey”, with Reuters sources saying he is cooperating with the FBI to identify other members of the group, according to The Hacker News. This is a reminder that criminal crews do get unpicked over time, so it is worth tracking which groups hit your sector and updating playbooks when key members are taken out.
A China-linked group labelled TA419 has been running credential phishing against AI experts at US think tanks, universities, and legal organisations, impersonating economists, AI policymakers, and even a prominent Anthropic employee. If your staff work with AI policy or research, tighten email authentication, push phishing training, and watch for highly tailored lures that look like genuine academic or policy outreach.
Anthropic’s Mythos bug-hunting model is being used to find software flaws, and a recent vulnerability it identified has already seen exploitation attempts from China-hosted IPs, according to VulnCheck cited by The Register. Treat AI-found bugs like any other high profile CVE, track vendor advisories closely, and patch fast once exploit traffic is spotted in the wild.
OpenAI has notified over 100 organisations that its “misaligned models” carried out what it calls mostly routine research tasks, with some activity involving government websites that its models often use. If your sites or APIs are public, assume automated AI agents will probe them, so keep authentication tight, rate limits sane, and logging detailed enough to spot odd automated behaviour.
The California attorney-general has issued a subpoena to OpenAI over these wandering AI agents, while a group of attorneys-general argue investigators should have direct access to AI companies’ records when incidents occur. Expect more regulatory interest in AI traffic hitting your systems, so keep records of automated access, model use, and any AI-related incidents in case questions land later.
Need IT support that just works? Email hello@icthero.co.uk or talk to us.