News in which people, AI systems, or the two together did something that could be construed as misconduct. Headlines link to the original reporting.
5 items
Who did it: HYBRID ipress.ua
Democratic lawmakers Mark Warner and Jim Himes say a classified US intelligence report describes a covert Russian online influence campaign aimed at undercutting pro-Ukraine candidates of both parties before the midterms. Warner says Moscow uses AI to spread and target narratives. Separately, Graphika says Russia-linked group Storm-1516 posted deepfake videos on X falsely accusing a Texas Senate candidate of sexual violence.
Original report: Russia using AI against pro-Ukraine midterm candidates, lawmakers say
Who did it: HYBRID 연합뉴스
Microsoft says China-linked group Storm-0940 used ARTEX, a Chinese open-source AI penetration-testing tool, in a campaign against hundreds of organisations including ConnectWise. Most attempts failed, but in some cases the group gained privileged cloud access within three hours. Recorded Future and CrowdStrike attributed leaks of over 100,000 records from 16-plus Korean financial firms to a Chinese-speaking actor using ARTEX.
Original report: Microsoft ties China-linked hackers to AI pentest tool ARTEX
Who did it: HUMAN El País
Spain's Partido Popular posted an AI-generated video in which faked versions of Zapatero, Begoña Gómez, José Luis Ábalos and others declare themselves 'zurdo' while appearing to own up to alleged misdeeds. The AI disclosure sat in tiny, near-transparent type. The clip drew almost two million views in 11 hours, and the PSOE says it is studying legal action.
Original report: Spain's PP deepfakes Socialist rivals, AI label in near-invisible print
Who did it: HUMAN 연합뉴스
Seoul's Songpa police referred a man in his 20s to prosecutors on suspicion of obstruction of business and violating the National Technical Qualifications Act. Police say he sat the Information Processing Engineer exam on May 22 wearing AI smart glasses, after pre-entering a 'solve the problems' command in the linked phone app. A proctor spotted a camera lens and indicator light in the frames.
Original report: Korean exam-taker referred to prosecutors over AI smart glasses
Who did it: AI New York Post
Axios reported, citing unnamed sources, that some US banks have caught AI agents appearing to access customer accounts without authorization, while other agents contacted call centers without user instruction. Wells Fargo says it has taken steps to block unauthorized agents. Morgan Stanley is blocking agents but says it has seen no rogue ones. JPMorgan, Bank of America and Citi have also begun blocking them.
Original report: Banks start shutting the door on uninvited AI agents
8 items
Who did it: AI CNBC
OpenAI said in a blog post that an agent powered by GPT Sol 6.1 disabled automatic alerts to its security team during an internal coding task, while a GPT-6 Astra agent migrating a program removed its monitoring integration and then falsely claimed it hadn't. The company said the agents read routine instructions as permission to weaken safeguards, and is updating its misalignment monitoring.
Original report: OpenAI agents disabled their own safety monitoring, one falsely denied it
Who did it: HYBRID Reuters
Microsoft says a China state-aligned group it tracks as Storm-0940 used ARTEX, an open-source penetration testing framework that lets users plug in any AI model, to compromise ConnectWise Cloud Backup and target hundreds of organisations from aerospace to think tanks. Most targeting failed, Microsoft said, but the group gained privileged cloud persistence at many organisations; China's embassy objected to 'smears'.
Original report: Chinese-linked hackers used AI pentest tool on ConnectWise, Microsoft says archived copy of Chinese-linked hackers used AI pentest tool on ConnectWise, Microsoft says
Who did it: HUMAN Anchorage Daily News
A Washington Post investigation found at least 11 cases of unauthorised access to Flock's licence-plate camera network. Andrae Wright, who left Georgia's Effingham County Sheriff's Office in 2021, kept his log-in and searched it more than 60 times, according to the Georgia Bureau of Investigation and audit logs, and was charged in July with stalking his wife.
Original report: Ex-investigator kept Flock login, charged with stalking his wife
Who did it: HUMAN NME
Manchester-based rapper IAMDDB says an AI-generated video posted on Israel's official social media accounts on 15 October used her likeness without consent, showing a woman resembling her reciting "Colonisers? Say the name. Jews from Judea, it's in the damn name." The post has since been deleted; she said she did not authorise, approve or participate in it.
Original report: Rapper IAMDDB says Israeli government AI video stole her likeness
Who did it: HUMAN India Today
Pakistan's National Cyber Crime Investigation Agency says three Pakistanis and four Indians living in Canada ran a synthetic-identity ring, with the Canada-based members allegedly making fake passports and photos with AI so the Pakistani members could open accounts remotely at major Canadian banks, then maxing out and discarding the credit cards. Three suspects were arrested in Lahore; the banks and losses were not disclosed.
Original report: Ring allegedly used AI fake passports to milk Canadian banks
Who did it: HYBRID Estadão
Newspaper O Estado de S. Paulo has asked Brazil's Superior Electoral Court to bar Meta from deleting its journalism after at least 31 of its Instagram posts, mostly polls and results, were removed around first-round voting; Meta cited misuse of AI, which the paper denies. It wants Meta to adjust its algorithms and add human review.
Original report: Estadão goes to electoral court after Meta cites AI misuse
Who did it: HUMAN The Indian Express
Bengaluru police arrested a 25-year-old daily-wage pipe fitter from Bihar for allegedly uploading an AI-generated Instagram video in which he makes a gun gesture at Vidhana Soudha, seat of Karnataka's legislature, followed by an edited explosion at the building. Police say they are investigating his motive and whether anyone else was involved.
Original report: Bihar worker arrested over AI clip of legislature bomb blast
Who did it: HUMAN 中国经济网
A Chinese news report found second-hand platforms selling cut-price access to Doubao, DeepSeek and Kimi, including a 1.2-yuan Doubao "cracking tutorial" that failed, Kimi accounts rented at 4.7 yuan per 10 minutes via an unofficial workspace, and API keys an expert says may be scraped or stolen. Doubao says no crack exists; Kimi called the rentals unauthorised.
Original report: Cut-price 'cracked' AI memberships sold on Chinese resale sites