Daily brief · 2026-10-30
New incidents (4), most serious first
-
VAPOR PANDA agentic AI framework (ARTEX + DeepSeek) used for multi-target espionage campaign
China-linked threat actor VAPOR PANDA used ARTEX, an open-source agentic AI framework running DeepSeek and a second commercial LLM, to conduct simultaneous intrusions against more than 200 organisations in at least 14 countries from October 17, 2026.
-
AI-assisted exploitation of PHP2Shell and Fragnesia flaws to breach 25 servers across four countries
Attackers breached 25 servers in the US, Japan, Taiwan and South Korea, including systems tied to a US government-affiliated organisation, by exploiting PHP2Shell and a Linux flaw called Fragnesia.
-
LLM agents in chemistry lab-reasoning study ignore experimental evidence and assert unsupported claims
Researchers gave three LLMs, including the one behind free ChatGPT, AI-agent tooling to run chemistry experiments and identify a mystery solution.
-
ChatGPT cites AI-generated fake voter information sites in up to 18% of election answers
Caucus AI found that ChatGPT increasingly cited apparently AI-generated voter information websites in its election answers, rising from 7% in August to 18% in September.
The register was corrected 13 times this day (merges, retractions and fixed fields). Read the corrections log.