CNN reported that a military intelligence report falsely claimed a Chinese vessel in the Middle East carried components for a nuclear-weapons program; armed boarding teams were preparing to move in and military aircraft were already airborne. The episode began when an analyst asked a chatbot to analyze the ship’s manifest; the system combined open-source information with classified signals intelligence, produced an incorrect cargo conclusion, and was then used to turn that conclusion into a formal intelligence report without intervening verification.
Why it matters
A source described the report as entirely false and said it reportedly came close to triggering an armed operation that could have escalated tensions between the United States and China.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Security Daily
AI & Agents · The Hacker News
What happened
Three Hacktron researchers used Anthropic’s Claude Opus 5 to chain two flaws, take over the ChatGPT and Codex accounts of several OpenAI employees, and reach an internal OpenAI code repository. The attack chain began with a flaw in the software running OpenAI’s public help forum and continued through a weakness in OpenAI’s login system.
Why it matters
The reported chain makes the boundary between a public-facing service, account access, and internal code resources the central practitioner concern, rather than the use of an AI system alone.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Security Daily
Exploitation · Helpnetsecurity
What happened
An individual impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from Revolut. Revolut confirmed the incident on Saturday, September 12.
Why it matters
The incident distinguishes a sender address associated with an agency from verified authority to obtain customer records.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Evidence is visible. Uncertainty stays visible too.
Baitaphish separates source records from interpretations, labels AI-assisted enrichment, and avoids turning ingestion volume into unsupported claims about threats, prevalence, or risk.
