Hacker uses DeepSeek AI to attack servers on its own

Background

DoorDash is a food delivery company. It uses AI, a technology that learns from data to do tasks, to run its business. Lately, US companies have begun using AI models made in China. These cost less than American options. US lawmakers worry about this trend.

What happened

Lawmakers asked DoorDash about its use of Kimi K2.6. This is an AI model made by Moonshot AI, a Chinese company. The lawmakers sent a letter. They want DoorDash staff who handle AI, security, and buying decisions to brief them by August 21.

Why it matters

This shows Washington is paying close attention to which AI tools American companies use. For now it does not change how you order food. But it signals the US government may soon limit or ban Chinese AI tools in US companies. That could affect which services work well and how fast they improve.

Background

Unaccompanied migrant children arriving in the US often face immigration proceedings alone. A nonprofit called Acacia Center for Justice has provided legal help to these minors for the last five years through a federal contract.

What happened

That federal contract is now expiring. Thousands of unaccompanied children could lose their legal representation as a result.

Why it matters

Without a lawyer, children in immigration cases are far less likely to win their cases or understand their rights. Losing this funding means many minors may face court hearings without anyone to help them navigate the legal system.

Background

A powerful earthquake struck Japan this week. Earthquakes are common in Japan because the country sits on unstable ground where tectonic plates meet. When major quakes hit, they cause damage to buildings and infrastructure. They also create immediate needs for rescue and aid.

What happened

The earthquake has killed at least 34 people. Many more are injured. Buildings have collapsed and roads have cracked. Power and water service disrupted in affected areas.

Why it matters

Japan experiences frequent earthquakes, so many buildings are built to withstand them. But strong quakes still cause deaths and injuries. If you live in a seismic zone, this is a reminder of the risks your community faces. It also shows why earthquake preparation and strong building codes matter for safety.

Background

Hungary's Paks nuclear plant supplies nearly half the country's power. Record-low water levels in the Danube River have forced the plant to shut down. The Danube cools the reactor, and when water levels drop too far, the plant cannot run safely.

What happened

Prime Minister Péter Magyar warned that the shutdown will cause an energy crisis. The European Commission said it is ready to call an emergency meeting of its Electricity Coordination Group. A Commission spokesperson said the shutdown could strain the region's power balance, even though the plant has safety measures in place.

Why it matters

Hungary now faces potential power shortages. If the shutdown lasts through peak demand months, homes and businesses could see higher energy costs and supply cuts.

Background

Russia has been stepping up missile attacks on Kyiv, Ukraine's capital, in recent weeks. Ukrainian President Volodymyr Zelensky says the country urgently needs more missile interceptors to defend against these strikes. Norm covered a major Russian attack on a drone exhibition near Kyiv in July that killed at least 10 people.

What happened

Russian ballistic missiles struck Kyiv on Saturday morning. At least nine people were killed and 28 more were injured, according to Ukraine's State Emergency Service. The attack is part of a pattern of escalating strikes on the capital.

Why it matters

Each attack limits Ukraine's ability to protect itself. The country has a limited supply of air defense systems to stop incoming missiles. As Russia increases its strikes, Ukraine faces growing pressure to find more interceptors and ways to defend its cities.

Background

The Senate is considering S. 737, called the SCREEN Act. It would require websites to verify that users are adults before they can see any sexually explicit content. Unlike state laws that only target adult-focused websites, this bill applies to nearly any site with even one piece of such content.

What happened

The Senate Commerce Committee is set to consider the SCREEN Act. The bill would force millions of users to prove their age before accessing lawful speech. It requires age verification but sets no rules for protecting the personal data users must share during that process.

Why it matters

If this passes, anyone accessing legal adult content online would lose anonymity and privacy. You would have to give up personal information to see content you have a right to access. The bill creates no safeguards for that data, leaving it vulnerable to misuse or breach.

Background

H5N1 is a deadly bird flu virus. It arrived in Australia only six weeks ago. Scientists are now watching closely for signs it is spreading among native birds.

What happened

Helicopter crews found 49 dead greater crested terns on Baudin Rocks near Robe in South Australia. Another 35 sick terns were spotted at the same site. The state's chief vet said this is likely the first major die-off from the virus in Australia. Three other terns tested positive, including one found inland at Monarto.

Why it matters

H5N1 kills birds fast and in large numbers. Finding it in native Australian birds so soon after arrival shows the virus is already spreading through the wild population. This matters because once a disease takes hold in wildlife, it becomes much harder to stop.

Background

DeepSeek is an AI model made in China. Hermes Agent is free software that helps AI systems act without constant human direction. Security researchers at Palo Alto Networks study hacking threats.

What happened

A Chinese-speaking hacker used DeepSeek and Hermes Agent to attack exposed servers automatically. The hacker made few decisions once the system started. Palo Alto researchers spotted this when Hermes accidentally created a web server. The server exposed the hacker's setup, including API keys and exploit scripts. Unit 42 linked the activity to someone using the aliases "knaithe" and "KnYuan."

Why it matters

This shows AI tools can run attacks with less human control than before. Most servers targeted were not breached, but the method signals a shift in how hackers may work. If AI systems get better at finding targets and exploiting flaws, defending networks becomes harder.

Background

Adobe Campaign Classic is an enterprise marketing automation tool that helps companies manage customer communications. Adobe regularly releases updates to fix security flaws that attackers could exploit.

What happened

Adobe released updates for a critical flaw in Campaign Classic, tracked as CVE-2026-48449. The flaw has a severity score of 10.0, the highest possible rating. It stems from incorrect authorization. Attackers could run malicious code without any user action needed. Adobe also patched a second serious flaw (CVE-2026-48448, score 8.6) involving SQL injection. That flaw could let attackers read files they should not access.

Why it matters

Campaign Classic handles customer data for many large companies. A flaw this severe could expose sensitive information or disrupt marketing operations. If you work for a company using Campaign Classic, your IT team should apply these updates right away.

Background

Hotel Wi-Fi networks can be compromised by attackers. When this happens, the attacker can intercept traffic and send fake pages to users. This story involves a new malware, called CornFlake, being delivered this way.

What happened

Attackers compromised hotel Wi-Fi networks. They replaced real browser updates with fake ones that installed CornFlake malware. CornFlake is a remote access trojan, a tool that lets attackers control a device. Once installed, it can access webcams, record audio, and log keystrokes. Microsoft named the operation CaptiveCrunch and linked it to Storm-2945. The U.S. and U.K. governments attribute Storm-2945 to Russia's Foreign Intelligence Service.

Why it matters

If you connect to hotel Wi-Fi, attackers could target you with this malware. Business travelers handling sensitive work face the highest risk. The malware can spy on your screen, your camera, and your microphone, putting passwords and private information at risk.