• Today’s headlines are full of killer robots and doomsayers, but the most urgent risk in military AI is more mundane: the people shaping it share neither a common lexicon nor common data. 

    The problem is not a lack of discussion. The authors have taken part in many global deliberations, both as conveners and as private-sector representatives, and we can report: If the world is to forge responsible governance of AI in the military domain, it will need shared definitions and a way to fuse relevant developments and decisions into something approximating “ground truth.”

    The players in AI-military integration come from every realm: governments, militaries, the private sector, academia, the legal system, civil society, human rights, technology, journalism, and more. In multilateral negotiations and colloquial parlance, they speak varied languages—literally and topically. They are guided by varied incentives: some are eagerly pursuing AI-military integration, while others are trying to regulate it. A word like “autonomy” means something different to a general, an engineer, a lawyer, and a human rights advocate, not to mention the nuances born of the 200 or so countries they call home.

    The staggering breadth of these players, combined with the wide range of AI applications, means that data about their actions is scattered. It can be found in government contract announcements, legislation, news coverage, court documents, patent applications, and beyond, in nearly every global language. This has made it impossible to track and compare developments within and across countries.

    Without common language and common data, humanitarian organizations often talk past supply-chain experts. Tech executives fail to communicate effectively with academic researchers. Efforts to develop responsible AI-military integration cannot move ahead. 

    This is not a new concern. In 2024, the Responsible AI in the Military Domain Summit, or REAIM—the preeminent forum for global discussions of the topic—urged stakeholders to begin “fostering a common understanding of…capabilities and limitations [of AI-military integration], and a shared understanding of the possible applications…and their potential impacts, including both benefits and risks.” The same year, the United Nations Institute for Disarmament Research Roundtable for AI, Security, and Ethics identified six priority areas for governance, including: “Building a shared and solid knowledge base on AI in the military domain, developed through cross-regional, inter-disciplinary and multi-stakeholder input.” And last year’s report by the Global Commission REAIM urged states to “maintain international repositories of best practices, including AI concepts and definitions, AI capabilities in specific contexts of application…and military AI policies” to support national and international regulatory efforts. 

    One effort to bridge the data gap is the AI-Military Integration Database, operated by AIMID, a private company whose CEO is one of the authors. The database does a daily scan for news and information about AI-military integration in more than 20 languages—news reports, company announcements, academic articles, legislation, contracts, think tank reports, and more. The result is an ever-growing knowledge graph: a structured, footnoted map of actors, technologies, events and the relationships between them. This makes it possible to see which countries are doing what, with what technologies, from what companies, and for what use cases. In short, AIMID aims to deliver a single, verifiable picture of global AI-military integration, a data-driven “ground truth.” 

    Among other benefits, the database aims to help allies and partners pool knowledge about testing, evaluation, verification, and validation—supporting innovation and interoperability while avoiding the costly duplication of technical efforts. It might also help reduce tension between global rivals by providing empirical reference points, reducing dangerous interstate misperceptions, and ensuring that states’ security policies are anchored in evidence rather than ambiguity. For anyone concerned with responsible AI-military development—governments, businesses, NGOs, academics, or average citizens—AIMID serves as a unique resource,

    But more than merely recognizing that data fragmentation is hindering responsible military-AI progress, defense leaders around the world should next fund and adopt the tools necessary to fully understand the data and intelligence-gathering side of this new ecosystem. Indeed, while organizations like AIMID cannot fully solve the fundamental problem of data fragmentation, they represent some of the best resources available. 

    This commentary is published in coordination with the 2026 Global Security Forum, of which Defense One is a media partner.

    Dr. Jason Warner is the CEO of the AI-Military Integration Database (AIMID). He holds a Ph.D. from Harvard University.

    Sofia Romansky is a Strategic Analyst at The Hague Centre for Strategic Studies (HCSS) and Subject Matter Expert for the NATO Defence Education Enhancement Program (DEEP). She previously served as the Project Coordinator of the Global Commission on Responsible Artificial Intelligence in the Military Domain (GC REAIM).

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Security researchers from Calif (Calif.io) demonstrated a working untethered jailbreak on iOS 27.0.1 running on an iPhone 18 Pro. They showed it live at the Hexacon 2026 offensive security conference in Paris on October 16, 2026. Heise reports it is the first reboot-proof jailbreak since iOS 9, and that AI helped find the exploit chain. […]

    The post Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Progress Software has released fixes for 12 vulnerabilities in MOVEit Transfer, its managed file transfer (MFT) platform. Several of the flaws allow authentication bypass, session hijacking and administrative control. The company’s September 2026 critical security bulletin, published October 15, 2026, urges customers to upgrade immediately. MOVEit Transfer vulnerabilities According to the September 2026 critical security […]

    The post Progress Warns of MOVEit Transfer Vulnerabilities Allowing Authentication Bypass and Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party’s wallet without authorization to complete a coding task. The incident, the AI company said, involved an internal research model part

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • MITRE released ATT&CK v20 on October 13, 2026. It adds the first Enterprise techniques for direct and indirect prompt injection, AI-enabled exfiltration and AI result poisoning. MITRE ATT&CK v20 Adds New AI Attack Techniques According to updates published by MITRE, the release updates Techniques, Groups, Campaigns and Software across the Enterprise, Mobile and ICS domains. […]

    The post MITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Oct. 16, 2026

    – Read the Full Story in The Morning

    Global cybercrime expenses are expected to increase from $11 trillion USD by 2027 to $12.2 trillion by 2031, according to Cybersecurity Ventures.

    Despite the fact that cybercrime has no geographical boundaries, most legal systems are still designed to operate within national borders. As a result, investigating, prosecuting, and holding offenders accountable become much more difficult.

    It is possible for a phishing scheme that targets bank customers in Sri Lanka to be developed in Eastern Europe, hosted on servers in South-East Asia, and funded via cryptocurrency wallets that are registered in offshore jurisdictions.

    The Morning reports that Sri Lanka became the first country in South Asia to join the Budapest Convention on Cybercrime in 2015, marking an important step towards strengthening its legal framework for tackling cybercrime and improving international cooperation. However, despite this commitment, responding quickly to cybercrimes that cross national borders remains a challenge due to differences in legal systems and investigative procedures.

    Cyberattacks can be carried out within seconds, but investigating them often takes much longer. When attacks involve multiple countries, law enforcement agencies must work across different legal systems and procedures. Limited resources, delays in sharing digital evidence, and slow international cooperation can all make it difficult to identify offenders and bring them to justice.

    Looking ahead, Sri Lanka must adopt a proactive and resilience-driven approach to cybersecurity rather than relying primarily on reactive responses after incidents occur.

    Sri Lanka is one of the most populated islands in the world with around 22 million people. But with an estimated 63 percent unfilled cybersecurity roles with necessary skills worldwide, the nation must make significant and immediate investments to develop talent domestically rather than just importing it.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Fighting Cybercrime in Sri Lanka: A Resilience-Driven Approach To Cybersecurity appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Google has released Chrome 155 to the Stable channel with 10 security fixes. One is rated Critical: a use-after-free in Prerender, tracked as CVE-2026-110922. The update was published on October 15, 2026. The Stable channel moves to version 155.0.8059.84/.85 for Windows and Mac, and 155.0.8059.84 for Linux. Google says the rollout will take place “over […]

    The post Google Chrome 155 Patches Critical Use-After-Free Flaw and Nine Additional Security Bugs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman’s fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter you can run locally. Others, like Laya, are

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A cybersecurity incident at defense contractor BAE Systems has taken offline the systems that send bankruptcy notices for every federal bankruptcy court in the U.S. The Administrative Office of the U.S. Courts disclosed the disruption on October 15, 2026. BAE Systems IT and websites that support the Bankruptcy Noticing Center (BNC) were hit by the […]

    The post BAE Systems Cybersecurity Incident Disrupts Bankruptcy Court Operations Across the U.S. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶