Critical Infrastructure Security Agency — U.S. cybersecurity watchdog
The White House has authorised a program that will allow vetted U.S. private companies to carry out government-directed cyber surveillance and disruptive operations against overseas transnational criminal organisations. The memorandum has required Justice and Homeland Security oversight, a $1m escrow for participating firms, and a 60-day deadline for agencies to set participation rules.
The UK government has confirmed that Iranian-linked hackers targeted a small-scale energy generator last month. The incident did not threaten the wider energy system, and authorities have issued guidance to power firms while expanding cyber resilience plans, including an AI-powered shield for critical infrastructure.
Agencies allege that Chinese firms such as DeepSeek, Moonshot AI and Alibaba have distilled billions of tokens from US models since late 2024 to train their own systems. The claim follows a joint advisory by the NSA, FBI and CISA and has sparked Beijing's rebuttal.
Emma Bonino, longtime Italian politician and feminist activist, has died at 78, according to +Europa. Her career spanned over five decades, including roles as European commissioner and foreign minister. Tributes highlight her lifelong advocacy for abortion rights, humanitarian aid, migrants’ rights, and civil liberties across Italy and the EU.
Early voting has begun in multiple states as the federal government has pursued legal and investigative efforts to challenge mail voting and hunt for noncitizen voters. The Supreme Court has blocked new federal limits on mail ballots, states are sending millions of absentee ballots, and the DOJ and DHS have opened investigations and filed charges in several states.
Security researchers have found two critical vulnerabilities in the PHP programming language, labelled PHP2Shell, and PHP maintainers have released emergency patches. Governments and major tech firms have urged operators to update immediately or temporarily take sites offline after AI-assisted research and an early public leak triggered millions of exploitation attempts between 21–27 October 2026.
Advanced AI models and open-source hacking tools have exposed and helped exploit long-hidden software vulnerabilities. Firms have linked autonomous tools like Artex to active attacks, while frontier models have found thousands of bugs in PHP and other critical codebases. Organisations are patching systems and warning that AI will accelerate both discovery and malicious reuse of flaws.
Multiple waves of cyberattacks have hit internet-connected refrigeration and cold-chain controllers across Europe and the United States since early November 2026, forcing retailers and blood banks to discard chilled stock and prompting a joint U.S. government warning that industrial refrigeration systems remain under active threat.