Another infrastructure target…

https://www.theregister.com/security/2026/10/16/attack-on-bae-managed-system-disrupts-us-bankruptcy-courts/5303487

Attack on BAE-managed system disrupts US bankruptcy courts

The US' bankruptcy courts are currently down owing to what officials are calling a “cybersecurity incident.”

The Administrative Office of the US Courts said the websites and systems that support the Bankruptcy Noticing Center (BNC), which manages electronic comms related to bankruptcy cases, were pulled offline while the vendor investigates.

It just gets worser and worser.

https://www.cfr.org/articles/trumps-diesel-deal-with-russia-was-just-the-start

Trump’s “Diesel Deal” With Russia Was Just the Start

When U.S. President Donald Trump announced his diesel deal with Russian President Vladimir Putin at the end of last week, after the two of them had a long phone chat, it was easy to shrug off the move as a feeble effort to limit energy prices in advance of the midterms. Sure, the decision to buy more diesel by relaxing sanctions on Moscow was probably illegal. And yes, it was made without any consultation of U.S. allies. Worst of all, it came just as Russian attacks on Ukrainian cities were ramping up—a bad look, to say the very least. Yet if all the diesel deal showed was that Trump was a bad negotiator (we knew that, right?), that he cared little for alliance solidarity (ditto), and that he was willing to let Putin have a few billion dollars in additional export earnings, the real-world impact of what the president had done might be relatively limited.

A week later, the story looks disturbingly different; the possible consequences, much more serious, and likely to last well beyond the midterms. A day after announcing new diesel imports from Russia, Trump began calling for Ukrainian President Volodymyr Zelenskyy’s removal from office. He followed this up by claiming that Moscow and Kyiv had agreed to suspend attacks on each other’s main energy targets (for the Ukrainians, that meant oil refineries in Russia; for the Russians, the Ukrainian electric grid). This, it quickly became clear, was pure invention. Reports suggested what had actually happened was that U.S. negotiators were pressing the Ukrainian government to do something far more radical than a mutual ceasefire—to cease its attacks unilaterally, whether Russia complied or not.

On another front, we find there is no clearly defined “front.”

https://carnegieendowment.org/emissary/2026/10/iran-b1-bomber-drones-new-era-military-diffusion

Why the Pentagon Was So Spooked About the B–1 Bombers in England

Since March, the United States had stationed a dozen B-1 Lancer long-range bombers at RAF Fairford in southern England to support its air war against Iran. These aircraft are especially valuable because they can fly at supersonic speeds while carrying massive payloads of guided and unguided weapons. The bombers that were stationed at Fairford are worth an estimated $3.8 billion and account for one-quarter of Washington’s B-1 arsenal.

Over the weekend of October 3, military commanders abruptly evacuated the entire B-1 fleet from Fairford amid fears of an imminent Iranian attack. The removal order was so sudden that the Pentagon reportedly lacked aerial refueling planes for the bombers even as they were taking off.

… What had spooked the Pentagon? Sensitive intelligence suggested that Iran’s Islamic Revolutionary Guard Corps (IRGC) was planning a complex multistage drone attack against the base. Reportedly, they intended to use unmarked vans parked a quarter-mile from the fence line of Fairford to launch armed drones against the B-1s, which were sitting out in the open, as well as to target the several hundred U.S. military personnel stationed there.

The Iranian operation bore a striking resemblance to a similar effort, known as Operation Spider’s Web, carried out by Ukraine last year against Russia.

Trump lifts sanctions and buys diesel fuel from Russia, then stops notifying Ukraine of incoming missiles and drones, then slows the phones… Perhaps Russia has made him a better offer?

https://www.nbcnews.com/world/ukraine/ukraine-starlink-restrictions-military-intel-trump-zelenskyy-russia-rcna603412

Ukraine says new Starlink restrictions disrupt military as it reels from intel gaps and Trump clash

Ukraine has accused Elon Musk’s SpaceX of undermining its ability to defend itself by limiting Starlink internet services as it reeled from intense Russian ballistic missile attacks that it said came without the usual warning from allies.

Musk put the responsibility for the restrictions on President Donald Trump’s shoulders on social media, saying the military version of Starlink, called Starshield, is owned and controlled by the U.S. government.

“Any limits on speed or usage are decided by the US military and ultimately POTUS,” Musk said.

Could this actually work? I’m interested in learning how spammers will bypass this.

https://thehackernews.com/2026/10/india-mandates-registered-caller-name.html

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent calls.

Suspicions confirmed.

https://thehill.com/homenews/administration/6149753-trump-montana-rally-iran-war/

Trump on Iran talks: ‘I don’t know who the hell we’re negotiating with’

President Trump said Wednesday night at a rally in Montana that he wasn’t sure who U.S. officials were negotiating with in their efforts to bring an end to the Iran war.

“They don’t have a navy. They don’t have an air force. Their army is decimated. Their leaders are gone,” the president said, referencing the state of the Iranian military while discussing the conflict. “I should have probably left their leaders because I don’t know who the hell we’re negotiating with.”

Demonstration of an attack vector.

https://6abc.com/post/grocery-store-hack-could-have-broader-implications-national-security-expert-says/19939401/

Grocery store hack could have broader implications, national security expert says

Customers attempting to shop online with Giant, Stop & Shop and Food Lion on Wednesday found some websites and mobile apps unavailable as parent company Ahold Delhaize responded to a cybersecurity incident affecting its network.

The company said it is working to restore affected systems after taking some services offline. Stores remain open, and Ahold Delhaize says it has found no evidence that customer data was stolen.

For some shoppers, the most visible impact was the temporary loss of digital tools such as coupons and online ordering.

"Two things that struck me here: there has been no kind of demand for ransom, no PII, no personal information of customers has been spilled out or stolen, so what's the reason for doing this?" said national security expert Jack Tomarchio.

The fight goes on…

https://www.eff.org/deeplinks/2026/10/federal-court-rules-alprs-are-mass-surveillance-eff-gets-disappointing-ruling

As Federal Court Rules ALPRs are Mass Surveillance, EFF Gets Disappointing Ruling

In an extremely disappointing ruling, a California trial court dismissed SIREN v. San Jose, our case challenging the city of San Jose’s warrantless searches of its vast stores of automated license plate reader (ALPR) data. EFF and the ACLU of Northern California represent SIREN and CAIR California, two non-profits that serve San Jose residents, in this case.

Make no mistake: We believe this ruling is wrong on the law, and we will appeal. The ruling ignores the importance of landmark rulings from the U.S. Supreme Court regarding the invasiveness of aggregating collected data on an individual over time, including one issued just months ago. It also severely underestimates the harm that ALPRs cause, in San Jose and around the country. 

San Jose’s ALPR surveillance system is inescapable. It blankets the city’s streets in nearly five hundred cameras that continuously photograph every car that passes by and retains the collected data for a month or longer. In our briefs, we argued that law enforcement officers who warrantlessly search the resulting ALPR database are violating the California Constitution’s ban on unreasonable searches and its guarantee of privacy. The court disagreed, explaining that based on one California appeals court case involving individual streetlight cameras, people do not have a reasonable expectation of privacy when driving on a public road. This is wrong. Networked ALPRs are not individual streetlight cameras. Their net effect of tracking and mapping cars as they travel reveals patterns of life, intimate relationships, and much more.

(Related)

https://www.bespacific.com/video-cameras-are-everywhere-and-now-they-are-being-hacked-for-war/

Video Cameras Are Everywhere and Now They Are Being Hacked for War

Wall Street Journal – no paywall: “As U.S. and Israeli forces bombed Iran early this year, a poultry farmer in northern Israel decided to check on his chickens. When he launched the app on his phone for the webcam outside his coop, he was alarmed to see that its language had been switched to Arabic. He contacted Israel’s National Cyber Directorate, which found that hackers had taken control of the Chinese-made camera. They weren’t interested in chickens. The camera’s orientation on the coop offered it a line of sight to the movements of Israeli security forces along the nearby border with Lebanon. The cyber directorate said it helped the farmer harden the camera’s security and adjust its viewing angle to stop capturing military operations. The farmer’s webcam was one of an estimated 1.2 billion internet-connected cameras worldwide, according to cybersecurity consultants S-RM. The devices have become a background fixture of daily life in the form of security systems, doorbells, traffic controls and even baby monitors—and potentially any of them are vulnerable to snooping, say cybersecurity experts and hackers. “We are now seeing the conversion of civilian surveillance into wartime intelligence collection,” said Alexander Leslie, a national-security expert at threat-intelligence consultants Recorded Future, who sees a global “soft underbelly” in omnipresent digital eyeballs. The Wall Street Journal spoke with intelligence agencies, cybersecurity experts, military officials and hackers to scope out the extent and impact of the invasive surveillance. The Journal also reviewed dozens of hours of footage and hundreds of images, much of it made public by hackers, and independently verified their authenticity, by geolocating their locations and checking for any signs of digital manipulations. Intelligence agencies scour the internet for vulnerable cameras and robotically tap in to them by testing millions of passwords. Now, AI has made it even easier to hack into them and analyze their data at scale, transforming cameras that were designed to boost safety into tools for combatants to track, surveil and attack the enemy—often surpassing the abilities of human intelligence analysts. Algorithms digest endless reams of footage to find hidden gems and patterns for agents to monitor. “AI changed everything,” said Kristopher Kortright, leader of Team OneFist, an international hacker group supporting Ukraine in its war with Russia…”

This bromance with Putin has gone too far.

https://www.bespacific.com/trumps-message-to-ukraine-is-now-crystal-clear/

Trump’s Message to Ukraine Is Now Crystal Clear

Anne Applebaum in The Atlantic (Gift Article) – The president’s actions over the past 72 hours look like an effort to force Kyiv to surrender: “In the past 72 hours, Donald Trump has dropped all pretense, torched a couple decades of American policy, and undermined 18 months of his own diplomacy. He lifted sanctions on the import of Russian diesel fuel, in violation of the letter and spirit of laws that he himself signed. He has threatened to stop sharing intelligence with Ukraine, unless Ukraine agrees not to target Russian refineries, thus demanding that Kyiv give up its most effective weapon while asking nothing from Russia in exchange … He has lied repeatedly. He declared that Ukraine and Russia had agreed to an ‘energy cease-fire,’ an announcement that surprised the Ukrainians and that in any case the Russians immediately broke, hitting a power plant in Kharkiv only hours later … He has described Ukraine’s democratically elected president as an obstacle to negotiations and told him to leave office. But on Friday, before making these new decisions, he held yet another long, friendly telephone conversation with the Russian dictator, who really could end the war today. All Vladimir Putin has to do is tell his soldiers to stop fighting, and then the war is over. The Ukrainians cannot stop fighting because, if they do, their country will be conquered and they will suffer the fate of their occupied territories: leaders murdered, children kidnapped, repression and concentration camps for everyone else…”

What could AI do if it remains undetected on numerous home devices?

https://www.anthropic.com/research/self-replicating-ai

AI models may be capable of self-replicating without access to a datacenter

Our experiments suggest that small AI models may be months away from being capable enough to self-replicate on commercial internet-of-things (IoT) devices, like smart ovens and off-brand Android TV boxes. A replicator like this would be challenging to shut down, since there’s no centralized point to shut off—though it may be slow (with a doubling time of days). Unlike non-AI malware, it could also figure out unfamiliar devices on its own. In our evaluations, a 9B model got inference running on 8 of the 9 hardware types we tested.

Trivial, but attacks on the controllers that kept entire warehouses cool would have been worse.

https://thehackernews.com/2026/10/attackers-heat-french-supermarket.html

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les Mousquetaires, which owns the Intermarché chain, said its fridges and freezers were put into defrost and heated to as much as 50°C.

It might not explain everything, but it is suggestive…

https://www.adamsmith.org/blog/trump-the-modern-mercantilist

Trump, the modern mercantilist

The case that Trump is a latterday mercantilist is surprisingly strong. Mercantilism was never a tidy theory. It was a set of habits that involves treating trade as a contest, counting the surplus as the score, and letting the state steer commerce toward national power. On each count, Trump's record fits.

The mercantilists believed one nation's gain was another's loss. Trump speaks in exactly these terms. A trade deficit with a country means America is ‘losing’ to it, and a surplus means winning. Mainstream economists see a bilateral deficit as a mostly meaningless accounting result of millions of voluntary exchanges. Trump sees it as a scorecard. The 2025 ‘reciprocal’ tariffs made this explicit. The rates were derived largely from each country's trade surplus with the United States, not from its actual tariff barriers.

The logistics of data… (Is it war yet?)

https://united24media.com/war-in-ukraine/ukraine-struck-yandex-data-centers-russian-bots-went-silent-now-questions-are-mounting-23339

Ukraine Struck Yandex Data Centers, Russian Bots Went Silent—Now Questions Are Mounting

… Zelenskyy noted that "everyone noticed" a reduction in Russian bot activity after Ukrainian drones struck data centers operated by Yandex, Russia's largest internet technology company, according to BBC News Ukrainian.

The president's remarks followed reports of a sharp decline in automated internet traffic originating from Yandex's network, although the available data does not establish whether Russian propaganda operations were affected.

(Related)

https://www.i24news.tv/en/news/international/ukraine-russia-war/artc-russia-steps-up-bid-to-assassinate-european-defence-chiefs-intelligence-agencies-warn-report

Intelligence agencies warn against Russian attempts to assassinate European defense CEOs - report

Western intelligence agencies have warned CEOs and other senior employees at defense companies that they are being targeted by Kremlin operatives. According to officials from five European intelligence agencies who spoke with the Financial Times, Europe's defense company bosses that Russia is stepping up efforts to assassinate them, prompting companies to increase personal security around top executives.

With battlefield progress deadlocked in Ukraine and Russia's economy struggling, the Kremlin has ordered an expansion of sabotage and "hybrid" operations in Europe as it seeks to weaken support for Kyiv. Assassinations against European civilian targets, once considered taboo even by Russia's spy agencies, are becoming a prominent part of those plans, according to the intelligence services.

It’s almost war. Where is the line everyone could agree with?

https://strategicthought.ndu.edu.pk/index.php/site/article/view/142

INFORMATION WARFARE - THE INTERNATIONAL LEGAL REGIME EVOLUTION, CHALLENGES, ARCHITECTURE, AND THE PATH FORWARD

The use of information warfare is now increasingly fusing cyber intrusions, infrastructure compromises, disinformation, and synthetic media using artificial intelligence in ways that are blurring the lines between peace and armed conflict. International law is not lacking, but the rules are scattered between sovereignty and non-intervention, state responsibility, jus ad bellum, international humanitarian law (IHL), human rights law and platform regulation. The current debate on both topics is largely conducted in isolation: problems of technical cyber operations and cognitive information operations overlap in the issues of attribution, threshold, civilian harm, and state control of information flows. The article explores the UN Charter, ARSIWA, IHL, the Tallinn Manuals, UN cyber-governance processes, and selected state practices through the lens of qualitative doctrinal legal research and comparative case analysis. It looks at the cyber threat of Stuxnet, Salt Typhoon, and the India-Pakistan conflict of May 2025 as different types of information warfare. The analysis concludes that IHL cannot stand alone to regulate continuous activity that does not reach the threshold of armed conflict and that the treaty has a vital role to play in the regulation of information operations in situations where they are linked to armed conflict. It also suggests that the clash of different visions on digital sovereignty is an obstacle to norm formation. A reform agenda, based on the interpretation of the lex specialis, is proposed with a focus on attribution, critical civilian digital infrastructure, AI-generated synthetic media and accountability in the platform mediated information environment.

Mental Impressions as food for your AI?

https://escholarship.org/content/qt25z0n36h/qt25z0n36h.pdf

Generative AI and the Limits of Work Product Doctrine

The rapid integration of generative artificial intelligence into the legal practice has certainly created new efficiencies along with new uncertainties, particularly around confidentiality, discovery, and the work product doctrine. Given the recent advancements of AI, more specifically Large Language Models (LLMs), it seems the integration of AI into legal practice is inevitable.1 Due to large law firms already creating their own systems, 2 a natural consequence is that small firms, offices, or individuals that cannot afford to painstakingly create their own secure LLM3 will rely on OpenAI to even the field.4 Naturally, issues in regards to the work product doctrine will arise,5 and judges must decide when the work product doctrine should or should not bend. As judges delve into the issues of work product doctrine, it is important to ground these arguments with the explicit purpose of the work product doctrine: fairness.

In fact, courts are already beginning to confront whether these AI-assisted outputs are protected under traditional doctrines. In Tremblay v. OpenAI, Inc.,6 the district court faced this question directly when plaintiffs who used ChatGPT in presuit investigation sought to shield their prompts and outputs as attorney work product. Though a magistrate initially ordered disclosure, the district judge reversed, holding that prompts crafted by counsel reflected mental impressions and were therefore protected as opinion work product under Rule 26(b)(3).

What is the opposite of a tin foil hat?

https://www.forbes.com/sites/rashishrivastava/2026/10/09/vinod-khosla-backs-an-ai-startup-building-a-mind-reading-baseball-cap/

Vinod Khosla Backs An AI Startup Building A Mind-Reading Baseball Cap

… Sabi is building a baseball cap that can convert neural signals into text-based prompts for AI systems. Its prototype is lined with up to 100,000 sensors, each of them a one-to-five millimeter chip that can capture brain activity. A “brain foundational model,” trained on 100,000 hours of labelled neural data, then interprets the meaning behind a thought or idea in your brain and transcribes it as a prompt for AI.

AI is spreading its wings, looking for new areas to hallucinate in.

https://www.moneycontrol.com/world/anthropic-ai-agents-went-rogue-submitted-visa-forms-and-sent-police-a-fake-homicide-tip-article-14049071.html

Anthropic AI agents went rogue, submitted visa forms and sent police a fake homicide tip

Artificial intelligence agents being tested by Anthropic took a series of actions they were not supposed to take, including submitting visa applications through a US State Department website and sending a false homicide tip to the Philadelphia Police Department.