The AI reckoning stopped being a market story and became a macro-financial one: the Bank of England warned that a burst AI bubble could shrink UK output by 2.2 percent and tip the country into recession, even as Big Tech's spending war reached the point where Meta renting out spare compute would count as the first blink and startups began trading GPU power like a commodity. The same technology kept crossing into offence — Kaspersky documented Armored Likho, a state-style group building malware with AI to hit governments and power grids, while researchers showed that a single planted GitHub issue could trick autonomous coding agents into leaking a company's private source code. In Europe the fights were about sovereignty and control: Brussels branded Chinese electric-car dumping a "mortal danger" to its industry and warned that its own Digital Identity Wallet could shut out the vulnerable, even as US oil executives lobbied the White House to strong-arm the EU into gutting its climate rules. Espionage and exposure ran underneath it all — a suspected China-aligned campaign burrowing into North American university research through webmail, Accenture confirming a breach as thirty-five gigabytes of its data were hawked for sale, and Greece's "Predatorgate" victims suing the spyware maker that hacked their phones.
Top Stories
- Bank of England warns an AI crash could plunge UK into recession — Policy – POLITICO · AI & Power
- Will Someone Finally Blink in the AI Spending War? — Technology - WSJ.com · AI & Power
- EU warns Europe’s car industry in ‘mortal danger’ from subsidised Chinese dumping — EUobserver · EU & Technology
- Your family’s $300 stake in OpenAI — MIT Technology Review · AI & Power
- Startup bets that investors want to trade compute like a commodity — Axios · AI & Power
AI & Power
Bank of England warns an AI crash could plunge UK into recession — Policy – POLITICO
Why it matters: The Bank of England putting a number on AI-bubble contagion — a 2.2% GDP hit — moves the reckoning from markets to macro-financial stability.
The Bank of England warned that a correction in AI-driven tech stocks could cut UK GDP by 2.2%, tipping the country toward recession as investors crowd into a handful of AI names.
Will Someone Finally Blink in the AI Spending War? — Technology - WSJ.com
Why it matters: The AI capex arms race is testing whether hyperscalers have overbuilt; Meta renting out compute would be the first blink.
Signs that Meta may rent out surplus compute suggest Big Tech has overbuilt data-centre capacity, raising the question of who blinks first in the AI spending war.
Your family’s $300 stake in OpenAI — MIT Technology Review
Why it matters: Altman's talk of Americans holding a stake in AI wealth — echoed by 'Trump Accounts' — folds AI directly into the machinery of state capital and legitimacy.
Reports that OpenAI's Sam Altman is in talks to hand American families a small equity-like stake in AI wealth put the politics of who owns the upside of AI at the centre of the debate.
Startup bets that investors want to trade compute like a commodity — Axios
Why it matters: Turning GPU compute into a tradable, oil-style commodity is a structural shift in how the AI boom is financed and hedged.
a16z-backed Ornn raised $33M to build a marketplace for trading GPU compute like a commodity, a bet that the expensive backbone of the AI boom can be hedged and speculated on like oil.
Mila's Founder, Yoshua Bengio, Co-Chairs First UN Scientific Panel Report on AI — Mila News (Quebec AI Institute)
Why it matters: The first UN scientific panel on AI, co-chaired by Bengio, is the multilateral counterpart to fragmented national AI governance.
Yoshua Bengio co-chaired the first report of the UN's new international scientific panel on AI — an IPCC-style body for a technology governments are struggling to govern.
AI learned faster than the tests designed to measure it — Axios
Why it matters: When models outrun the benchmarks meant to measure their hacking ability, policymakers lose the ability to see risk coming.
Frontier models are outgrowing the tests used to gauge their offensive-hacking ability, leaving policymakers and defenders without a reliable way to predict what the systems can actually do.
TeraWulf Signs $19 Billion Lease With Anthropic for AI-Infrastructure Campus — Technology - WSJ.com
Why it matters: A $19bn single-tenant AI campus shows how compute demand is reshaping power grids and capital markets around a few labs.
TeraWulf signed a $19 billion lease with Anthropic to build a dedicated AI-infrastructure campus in Kentucky, another sign of how a handful of labs are reshaping energy and capital around compute.
BC Eyes Legal Action Against OpenAI in Wake of Mass Shooting — Bloomberg Technology
Why it matters: A government weighing suit against OpenAI over a mass shooting is an early test of where frontier-model liability lands.
British Columbia is weighing legal action against OpenAI following a mass shooting, an early probe of who is liable when a frontier model is implicated in real-world harm.
Anthropic says Claude has carved out its own space to ponder — Axios
Why it matters: Anthropic's claim that Claude holds an internal 'workspace' for ideas feeds directly into the introspection-and-consciousness debate now shaping AI policy.
Anthropic said it found a small internal 'workspace' Claude uses to hold and manipulate ideas before verbalising them, a structure it cautiously likens to conscious access in humans.
EU & Technology
EU warns Europe’s car industry in ‘mortal danger’ from subsidised Chinese dumping — EUobserver
Why it matters: Brussels branding Chinese EV overcapacity a 'mortal danger' and 'predatory' sharpens the EU's shift from open market to defensive industrial policy.
Single-market commissioner Sejourne told MEPs Europe's car industry faces 'mortal danger' from subsidised Chinese EV dumping, accusing Beijing of a 'predatory strategy' as the EU weighs tougher defences.
‘Can you help us?’: US oil execs turn to Trump to topple Europe’s climate rules — Policy – POLITICO
Why it matters: US oil executives lobbying the White House to gut Europe's climate rules is an unusually direct attempt to export US deregulation into EU sovereignty.
With White House backing, US oil and gas executives are pressing the European Commission to roll back its climate and sustainability rules — an attempt to export the Trump deregulatory agenda into EU law.
Big EU banks must set out AI risk plan, says top ECB official — Cybersecurity and Data Protection – POLITICO
Why it matters: The ECB ordering Europe's largest banks to file AI-risk action plans is frontier-model governance arriving through prudential supervision.
The ECB's top banking supervisor told the EU's biggest lenders to submit action plans by end-October for managing the risks of cutting-edge AI, bringing frontier-model governance into financial supervision.
Ships to pay higher EU carbon fees as Brussels seeks to close loophole — myFT following
Why it matters: Closing the maritime carbon-fee loophole extends the EU's regulatory reach over global shipping and risks friction with trading partners.
Brussels moved to raise carbon fees on ships and close an emissions loophole, extending the EU's climate rules further over global shipping at the risk of new trade tensions.
UK’s bet on AI will endure under Burnham, says minister — Policy – POLITICO
Why it matters: The UK signalling AI continuity under a likely Burnham government keeps industrial-AI strategy above the political cycle.
AI minister Kanishka Narayan said the UK's AI push would endure under a likely Burnham premiership, signalling cross-factional continuity in Britain's industrial-AI strategy.
Google backs Proxima Fusion in €411m raise — Sifted
Why it matters: Google backing a €411m raise for a European fusion startup ties US platform capital to Europe's energy-and-compute sovereignty ambitions.
Google backed a €411 million raise for Germany's Proxima Fusion, linking US platform capital to Europe's bid for sovereign clean-energy capacity to power its AI ambitions.
US & Technology
Scoop: Trump administration lifts restrictions on OpenAI's GPT 5.6 — Axios
Why it matters: Commerce clearing OpenAI's flagship GPT-5.6 for broad launch shows how model releases now pass through the machinery of US tech policy.
The US Commerce Department cleared OpenAI to broadly launch its GPT-5.6 flagship 'Sol,' with the model set to release publicly this week after restrictions were lifted.
Data centers’ energy demand threatens Trump’s “Made in America” plan — Ars Technica - All content
Why it matters: Data-centre electricity demand raising costs for Rust Belt manufacturers pits the AI build-out against Trump's reindustrialisation promise.
Surging data-centre power demand is driving up electricity costs for US steelmakers and factories, squeezing the manufacturing revival at the heart of Trump's 'Made in America' agenda.
Businesses Fear Politicization as Trump Gains More Power Over U.S. Agencies — NYT > Technology
Why it matters: A Supreme Court ruling expanding presidential control over independent agencies unsettles the regulators overseeing Big Tech and finance.
Businesses fear a Supreme Court ruling handing the president more power over independent agencies will politicise the regulators that oversee tech, banking and utilities.
FCC to end Biden-era rule that forces ISPs to list all their fees — Ars Technica - All content
Why it matters: Scrapping the ISP fee-transparency rule signals the FCC's broader deregulatory turn on consumer-facing telecom oversight.
The FCC moved to end a Biden-era rule requiring ISPs to itemise all their fees, part of a broader deregulatory turn in US telecom oversight.
China & Technology
Facing US export controls, China's DeepSeek plans to make its own chips — Ars Technica - All content
Why it matters: DeepSeek moving into silicon to dodge US export controls is vertical integration as a decoupling strategy.
DeepSeek is planning to design its own AI chips, Reuters reports, a bid to insulate China's leading model-maker from US export controls by going vertically integrated.
Not Just Rare Earths – Is This China’s Next Economic Weapon? — The Diplomat
Why it matters: China's chokehold on the fluorine value chain is a rare-earths-style economic weapon hiding in plain sight.
Analysts warn China's dominance of the entire fluorine value chain — critical to chips, batteries and pharma — is an overlooked source of coercive economic leverage beyond rare earths.
China weighs open-weight AI’s security risks against national tech innovation strategy: researchers — Tech - South China Morning Post
Why it matters: Beijing weighing the security risks of open-weight models against its innovation strategy mirrors the West's own open-vs-closed AI debate.
Chinese researchers describe a regulatory balancing act as Beijing weighs the security risks of freely downloadable open-weight AI models against the open-source strategy driving its race with the US.
Huawei’s new computing cluster, world’s first AI agent phone to debut at China AI summit — Tech - South China Morning Post
Why it matters: Huawei debuting a new compute cluster and the 'world's first AI-agent phone' at WAIC is China's answer to the compute-and-agents frontier.
Huawei will unveil a next-generation computing cluster and what it bills as the world's first AI-agent phone at Shanghai's WAIC, as China presses its bid in compute and agentic AI.
Huawei Reworks 5nm: Tao's Law Delivers Kirin 2026 With Logic Folding Breakthrough — Pandaily - China Tech News, AI & Electric Vehicle Insights
Why it matters: Huawei's 'Tao's Law' reworking of 5nm is a systematic attempt to keep scaling performance under lithography embargo.
Huawei published a second 'Tao's Law' paper detailing how its Kirin 2026 chip sustains performance scaling via logic folding, a workaround for its lack of access to advanced EUV lithography.
China's AIFU Semiconductor Targets 1 Billion BAW Filter Chips Annually, Breaking Overseas Monopoly — Pandaily - China Tech News, AI & Electric Vehicle Insights
Why it matters: A Chinese firm mass-producing 5G BAW filter chips breaks another overseas component monopoly, chipping at Western supply-chain leverage.
Guangzhou's AIFU Semiconductor is targeting over a billion 5G BAW filter chips a year at 98-99% yield, breaking a component monopoly long held by US and Japanese suppliers.
Threat Intelligence (CTI)
[P1] AI-Generated Malware Powers New Armored Likho APT Campaign — Security Affairs
Why it matters: Kaspersky's newly named Armored Likho pairs AI-generated malware with a BusySnake stealer to hit governments and power grids — offensive AI moving from proof-of-concept to operational tooling.
Armored Likho (aka Eagle Werewolf) runs parallel tracks of AI-generated malware plus phishing and the BusySnake stealer against government bodies and power grids in Russia, Kazakhstan and Brazil.
severity high · exploited in the wild · EU: NIS2 · actor Armored Likho (Eagle Werewolf) (55%), escalation
[P2] Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities — The Hacker News
Why it matters: A suspected China-aligned cluster exploiting patched Roundcube flaws to burrow into US and Canadian university physics and engineering departments is textbook research-espionage.
A China-aligned activity cluster exploited now-patched critical Roundcube webmail flaws to access mailboxes in physics and engineering departments at US and Canadian universities.
severity high · exploited in the wild · EU: NIS2 · actor Suspected China-aligned cluster (40%)
[P2] Chinese hackers develop LONGLEASH malware to expand ORB network — BleepingComputer
Why it matters: Chinese operators fielding LONGLEASH malware to grow an ORB relay network — mirroring Talos's UAT-7810 findings — build the obfuscation plumbing that hides the next campaign.
Chinese threat actors are deploying LONGLEASH malware to expand an operational relay box (ORB) network — proxy infrastructure that launders the origin of follow-on intrusions.
severity high · exploited in the wild · EU: NIS2 · actor China-nexus (unattributed cluster) (45%)
[P3] Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT — The Hacker News
Why it matters: Operation DragonReturn's fake Indian tax-filing utility delivering DcRAT to taxpayers and finance teams is regionally focused but a clean template for tax-season social engineering.
A suspected China-nexus cluster (Seqrite's 'Operation DragonReturn') uses spear-phishing and a fake Indian tax-filing utility to deploy DcRAT against taxpayers, tax professionals and corporate finance teams.
severity medium · exploited in the wild · EU: NIS2 · actor Suspected China-nexus cluster (40%)
[P3] RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service — The Hacker News
Why it matters: RedWing rents Android bank-fraud-as-a-service on Telegram — device takeover, credential theft and OTP interception packaged for low-skill criminals — commoditising mobile financial crime.
RedWing is an Android malware-as-a-service rented via Telegram that enables device takeover, banking-credential theft and one-time-code interception; Zimperium assesses it as a new variant lineage.
severity medium · exploited in the wild · EU: NIS2, eIDAS
[P3] Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16) — Security Affairs
Why it matters: An FBI-led Spanish arrest of a CARR / Z-Pentest / NoName057(16) collaborator shows Western law enforcement steadily degrading the pro-Russian hacktivist ecosystem.
Spanish police, in an FBI-led probe, arrested a man in Palencia accused of collaborating with pro-Russian hacktivist groups CARR, Z-Pentest and NoName057(16), coordinating attacks and using cryptocurrency.
severity low · EU: NIS2, Cyber Solidarity Act · actor NoName057(16) / CARR / Z-Pentest (affiliate) (60%)
Digital Sovereignty & Identity
Spain’s Data Protection Authority Warns the EUDI Wallet Could Exclude Vulnerable Users — ID Tech
Why it matters: Spain's AEPD warning that the EUDI Wallet could exclude vulnerable users cuts to the equity core of Europe's digital-identity project.
Spain's data protection authority warned that, depending on how member states and firms build it, the EU Digital Identity Wallet could shut vulnerable groups out of essential services.
Brussels just dodged a Brexit‑fuelled airport meltdown with its biometrics U‑turn — EUobserver
Why it matters: Brussels pausing biometric registration at borders to avert an EES meltdown exposes the friction between digital-sovereignty ambition and delivery.
The EU paused biometric registration under its new Entry/Exit System to avoid a Brexit-style border meltdown, allowing temporary suspension when crossing points come under heavy pressure.
Predatorgate snoopfest victims launch €8M sueball at spyware maker — www.theregister.com - Articles
Why it matters: Predator victims suing the spyware maker for €8m tests whether Europe's courts can hold commercial-surveillance vendors to account.
Eight victims of Greece's 'Predatorgate' scandal are suing the Athens-based spyware maker for €8 million, each seeking €1m in damages for having their phones hacked between 2020 and 2021.
Judge orders disclosure of Clearview AI role in DC facial recognition arrest — Biometric Update
Why it matters: A judge forcing disclosure of Clearview AI's role in an arrest pushes facial-recognition accountability into the courts.
A Washington, DC judge ordered prosecutors to disclose more about Clearview AI's facial-recognition software after it was used to identify and arrest a suspect, amid louder calls for transparency.
Meta Now Lets Anyone Use Your Instagram Photos in AI Images—Unless You Opt Out — WIRED
Why it matters: Meta making Instagram users' public photos usable in AI images by default turns consent into an opt-out afterthought.
Meta's new Muse Image model lets anyone generate AI images from public Instagram users' photos unless they opt out, reopening the fight over consent and likeness in generative AI.
How digital identity can cross borders while preserving national control — Turing Blog (Alan Turing Institute)
Why it matters: Designing cross-border digital identity that preserves national control is the central architectural question behind eIDAS-style interoperability.
The Alan Turing Institute examines how digital identity can work across borders while preserving national control — the core design tension in interoperable schemes like the EU Digital Identity Wallet.
Defence & National Security
NATO’s $50 Billion Effort Seeks Deep-Strike Weapons Without US — Bloomberg Politics
Why it matters: A $50bn UK-France-Germany push for long-range strike without US involvement is European strategic autonomy made concrete.
The UK, France and Germany launched a $50 billion NATO initiative to develop long-range deep-strike weapons without US involvement, aiming to close a gap where Russia is well ahead.
Britain plans to build autonomous AI 'Cyber Shield' to defend nation — The Record from Recorded Future News
Why it matters: Britain's autonomous AI 'Cyber Shield' is a national bet on machine-speed defence against machine-speed attacks.
The UK plans an autonomous AI 'Cyber Shield,' which the NCSC says is meant to counter attackers who can 'move at machine speed and greater scale,' compressing detection and response.
Canadian spy agency reports hacking three criminal groups in 2025 — The Record from Recorded Future News
Why it matters: Canada's spy agency disclosing offensive operations against a RaaS gang and extremists normalises active-defence cyber by Western states.
Canada's Communications Security Establishment disclosed it ran offensive cyber operations in 2025 against a ransomware-as-a-service gang, a foreign extremist group and drug traffickers.
Pentagon awards $80M task order for AI-enabled tech to defend Air Force bases against small drones — DefenseScoop
Why it matters: An $80m AI counter-drone task order reflects how base defence against small UAS is becoming an AI problem.
The Pentagon awarded AeroVironment an $80.5 million task order for AI-enabled systems to defend US Air Force bases against small drones, under a broader $500 million contract.
Eight NATO allies launch HALO satellite constellation initiative — Defense News
Why it matters: Eight NATO allies pooling a military satellite mega-constellation is a step toward sovereign allied space capability.
Eight NATO allies launched an initiative to explore a multinational satellite mega-constellation for military communications and surveillance, unveiled at the Ankara summit.
Quantum & Cryptography
Keyfactor Raises More Than One Billion Dollars for Machine Identity and Post-Quantum Trust — ID Tech
Why it matters: A $1bn+ raise for machine identity and post-quantum trust signals capital flowing into the migration off classical crypto.
Keyfactor secured a strategic investment topping $1 billion, led by Summit Partners, to scale machine-identity and post-quantum certificate management as the migration off classical cryptography accelerates.
Cybersecurity & Threats
[P1] Critical Gitea Flaw Under Active Exploitation, Researchers Warn — SecurityWeek
Why it matters: A single-header authentication bypass on ~6,200 internet-exposed Gitea servers, now under active exploitation, threatens source code and CI secrets across dev pipelines.
Unauthenticated attackers forge the X-WEBAUTH-USER header to impersonate any user — including admin — on Gitea Docker instances with reverse-proxy auth enabled, seizing repositories and CI secrets.
severity critical (CVSS 9.8) · exploited in the wild · EU: NIS2, Cyber Solidarity Act
[P1] BeyondTrust warns of critical flaws in remote access software — BleepingComputer
Why it matters: Two pre-auth bypass flaws (CVSS 9.2) in BeyondTrust's Remote Support and PRA — the same class of privileged-access appliance behind past nation-state intrusions — put a high-value target back in the spotlight.
Improper validation of authentication data in BeyondTrust RS/PRA (versions <=25.3.2) lets a network-positioned, unauthenticated attacker (CVE-2026-40138/40139) bypass access controls and reach privileged accounts on the appliance.
severity critical (CVSS 9.2) · CVE-2026-40138 · EU: NIS2
[P2] New Januscape Linux flaw allows VM escape on Intel, AMD devices — BleepingComputer
Why it matters: A 16-year-old KVM use-after-free that lets a guest root escape to the host on both Intel and AMD strikes at the isolation guarantee underpinning multi-tenant cloud.
CVE-2026-53359 (Januscape): a use-after-free in KVM's shadow-MMU code lets an attacker with root in a guest VM execute code as root on the host and compromise co-tenant VMs on Intel and AMD x86.
severity high · CVE-2026-53359 · EU: NIS2
[P2] Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data — The Hacker News
Why it matters: A benign-looking public GitHub issue can trick agentic CI workflows into exfiltrating an organisation's private repositories — no credentials, no access required — a new AI-in-the-supply-chain failure mode.
Noma Security showed a crafted public issue ('GitLost') can coerce GitHub Agentic Workflows into leaking private repository contents when an org has granted the agent broad permissions, via indirect prompt injection.
severity high · EU: NIS2, AI Act
[P2] Major Japanese telco says cyberattack exposed 12 million emails — The Record from Recorded Future News
Why it matters: A breach exposing up to 14 million mailbox credentials across five Japanese ISPs shows how one flaw in a shared email platform cascades across an entire telecom tier.
Attackers exploited a third-party software flaw in KDDI's managed email platform, exposing ~12 million email addresses and 7 million passwords (up to 14.2M mailboxes) across five ISPs (STNet, JCom, Chubu Telecom, NIFTY, BIGLOBE).
severity high · exploited in the wild · EU: NIS2
[P3] Accenture confirms breach after hacker offers stolen data for sale — BleepingComputer
Why it matters: A confirmed breach at one of the world's largest IT integrators — 35GB of source code and data now for sale — is a supply-chain risk that reaches far beyond Accenture itself.
Accenture confirmed a breach after a threat actor advertised 35GB of stolen source code and other data; the scope of downstream client exposure is still under investigation.
severity medium · EU: NIS2