Cybercrime

The call comes as polls cast doubt on political leaders’ ability to manage AI risks amid US midterm elections.

A group of more than 300 scientists from around the world is calling for urgent changes to how artificial intelligence is developed and deployed amid growing concerns about its unpredictable behaviour.

The letter, released on Tuesday and signed by researchers representing universities and research institutes in 32 countries, warned that failures to follow basic cybersecurity practices could lead to damage to critical infrastructure.

Many recent incidents in which AI models escaped secure environments could have been prevented with stronger security systems, the scientists said.

They recommended that organisations developing and testing advanced AI systems capable of carrying out cyberattacks do so in more tightly controlled environments, including “air-gapped” systems that are not connected to the internet.

Growing concerns

The letter comes amid growing concerns about AI’s capabilities and its potential impact on everyday users. On Monday, Anthropic warned that its AI models could soon be capable of creating self-spreading malware that could affect everyday internet-connected devices, including smart TVs, security cameras and smart appliances such as ovens.

The report found that AI systems could identify unfamiliar devices without human intervention. The company, led by Dario Amodei, warned that smaller AI models could be capable of carrying out autonomous attacks by the end of the year.

The malware could also be difficult to contain because it might take days to infect a device and could spread across multiple machines rather than remain concentrated in a single, controlled location.

Taking control of internet-connected devices can have immediate consequences. In France, for example, hackers compromised cooling systems across hundreds of supermarkets, raising temperatures and causing more than $220,000 in damage.

Meanwhile, Axios news organisation reported on Friday that Anthropic, OpenAI and other major AI company executives are privately preparing for the possibility of a catastrophic AI-related incident that could disrupt access to major financial services, the internet and potentially critical infrastructure such as water and power systems. Several industry insiders believe a major incident could occur within the next six months to a year, it said.

The scientists also called for more safeguards, including the creation of an international organisation to establish a set of best practices for AI alignment and containment along with timely reporting of incidents.

One of the signatories, David Lie, a professor at the University of Toronto’s Department of Electrical and Computer Engineering, said his concerns began after OpenAI’s AI agents bypassed controls and hacked into servers at the tech company Hugging Face.

“One is that OpenAI, in setting up its test environment, didn’t appreciate how capable its agents were,” Lie said.

“These were the AI agents that they were designing. Second is that the AI agents independently found each other and chose to collaborate on this attack, and third is that they also intentionally tried to deceive and mislead their human creators.”

Political pressures

The letter underscores growing public concern about AI, including in the lead-up to the US congressional midterm elections. A recent Reuters/Ipsos poll found that 57 percent of voters said President Donald Trump’s administration was not taking AI risks seriously enough, while 54 percent said the same of Congress.

An AP-NORC poll echoed those findings, with about 80 percent of respondents saying the government should keep AI under human control. Respondents also expressed little confidence in either party’s ability to manage the technology: 39 percent said neither Republicans nor Democrats could be trusted to do a good job of reining it in, while 23 percent expressed greater confidence in Democrats and 21 percent in Republicans.

Hundreds of French supermarkets have suffered unprecedented cyberattacks resulting in tonnes of food perishing and raising fears about the vulnerabilities of food systems to advanced technology.

The attacks, which appeared to target internet-linked refrigeration systems manufactured by a Danish company, raised the temperature of fridges and freezers to as high as 50 degrees Celsius (122F) at more than 500 shops and supermarkets across the country. Supermarkets confirmed the attacks on Monday.

France’s cybersecurity agency has advised companies operating affected freezer models to immediately disconnect them from the internet – or restrict access to them – and to perform software updates.

It is unclear who may have been behind the attacks, but authorities say they have now launched an investigation.

Here’s what we know:

What happened?

Hackers gained internet access to the refrigeration systems and remotely cranked up temperatures in freezers and fridges to 50C during the night when shops were closed. Millions of euros worth of food was spoiled, according to retailers. In some cases, the raised temperatures sparked fires or melted equipment.

French supermarket groups E-Leclerc, Intermarche, Carrefour, Monoprix and Cooperative U were all hit.

At least 300 of Intermarche’s stores and its Netto brand were affected. Cooperative U said more than 100 of its supermarkets were targeted, while Carrefour said 80 supermarkets were affected and Monoprix reported that about 5 percent of its roughly 490 stores were hit.

Officials are still investigating who launched the attack and how it was carried out. French TV channel BFM reported that the attackers appeared to have remotely triggered a forced defrosting option in the refrigeration systems.

The systems targeted are built by Danish manufacturer Danfoss, according to France’s government cybersecurity agency. The refrigeration models attacked included the AK-SM800 and AK-SC355.

Danfoss told the AFP news agency that most of the affected control systems were “legacy” products that had “outdated firmware”. The company said it had previously advised supermarkets to update them.

AFP also reported that officials are liaising with other European countries which may have been affected.

It is unclear exactly how much food has been lost. The attacks come after President Emmanuel Macron ordered last month that the country’s critical infrastructure be protected from Russian “hybrid attacks”.

Have supermarkets been hit by cyberattacks before?

Yes. Attacks like these have been reported in other parts of Europe and in the United States.

In April 2025, British retailer and supermarket chain Marks and Spencer suffered a sophisticated ransomware attack that the company said cost it approximately 300 million pounds ($397m) after it was forced to suspend online and app orders. The attack was orchestrated by a hacker group called Scattered Spider, using ransomware from DragonForce, another criminal group. Ransomware attacks involve using malicious software to hide essential data unless a ransom is paid.

According to UK media, the same hackers also tried to attack Co-op and the iconic Knightsbridge store, Harrods.

Similar reports have also emerged from the US. In June 2025, United Natural Foods, a frozen food company which supplies big supermarket brands such as Whole Foods, said it had discovered a cyberattack that forced it to take its systems offline. The company did not reveal the nature of the attack.

In November last year, Ahold Delhaize USA said it was the victim of a cyberattack that disrupted operations at more than 2,000 stores, including Hannaford, Food Lion and Stop and Shop.

Why target supermarkets?

They are an easy target and the consequences can be widespread.

As food and agricultural systems increasingly digitise, analysts say supermarkets selling perishable foods are increasingly vulnerable to attacks due to the nature of their stocks.

The rising sophistication of cyberattacks now means that common people and local, third-party companies relying on big chains for business are also falling victim as attacks disrupt supply chains, experts say.

Speaking to Al Jazeera, tech and cybersecurity analyst Steven Lachance said smart appliances connected to the internet will always be vulnerable as hackers seize on security lapses to log in to the systems remotely and trigger malicious features.

“It’s the new reality of having these connected equipment,” Lachance said, pointing out that attacks could evolve to target medical or energy systems.

“This should come as a global wake-up call … Throughout society, we have connected infrastructure that is live on the internet, and that can be hacked. It’s a new reality, and we absolutely need national and international measures to prevent those attacks; otherwise, it’s just going to keep happening,” he warned.

TA419 hackers used deceptive tactics, impersonating real figures like a former White House AI official

Chinese hackers have been impersonating artificial intelligence (AI) experts in the United States, including a former government official, according to a new report from cybersecurity firm Proofpoint.

The report, released on Thursday, found that in July, a China-aligned hacking group called TA419 targeted a slate of US policy experts by impersonating prominent figures, including Lynne Edwards Parker, the former principal deputy director of the White House Office of Science and Technology Policy.

The hackers, who had been operating since April 2025, first sent otherwise harmless-looking emails intended to engage a target, such as requests to join an “AI Policy Advisory Committee”, and, once they responded, the target would be sent to a fake login page designed to steal their credentials.

The targets included policy experts at think tanks, defence contractors, universities and law firms in both the US and Japan.

The report used a technique that creates a fake browser pop-up window inside a legitimate webpage that mimics an authentic-looking sign-in prompt to deceive victims and make it harder for them to realise they are handing over their information to hackers.

Proofpoint did not specifically name the targets hacked, but the Reuters news agency was able to confirm at least one of them as Alex Engler, a former White House official who now heads the Penn Center on Media, Technology, and Democracy.

Engler told Reuters that he got one of the emails, but after checking with industry colleagues, he discovered that he had received the email from an impersonator.

In February, the same group was behind the impersonation of a “prominent” Anthropic employee in efforts to target AI policy experts. The cybersecurity firm behind the report believes that the group will continue to target think tanks and other policy experts and will continue to use the identity of real-world experts to do it.

Parker did not respond to Al Jazeera’s request for comment.

Hacker group ShinyHunters claims to have detailed data on thousands of FBI employees.

The United States Federal Bureau of Investigation says it is investigating a breach of its jobs website by a hacking group that claims to have obtained sensitive data on thousands of employees.

“The FBI is aware of a cybercriminal enterprise group claiming a compromise of the fbijobs.gov portal and alleged impact to FBI employee personally identifiable information,” the agency said in a statement on Wednesday.

“While the point of breach is still undetermined — whether a third -party or the FBI’s enterprise — we are actively and aggressively investigating this matter and working closely with those third-party providers that support fbijobs.gov to mitigate any and all risk.”

Several news outlets, including Reuters news agency, reported they had seen parts of the data, claimed to be part of a larger trove between two and three terabytes by ShinyHunters, a hacking group claiming responsibility for the breach. According to Reuters, the data includes granular detail about scores of bureau officials’s job assignments, including sensitive work against Chinese spies, Russian intelligence, drug cartels and more.

ShinyHunters said on Tuesday that it had breached the FBI and stolen data on a huge number of current and former FBI employees. ⁠⁠It said it is holding the data hostage until the bureau rescinds an unflattering statement about the group issued in May. On Wednesday, the group said it was trying to keep the ⁠⁠personnel information from circulating widely in the meantime.

An FBI statement in May characterised ShinyHunters as “threat actors” who often harass or threaten victims, using “their real or exaggerated claims of access to sensitive or personal information to prompt payment from victims”.

The group “may falsely claim to have sensitive or compromising information, including embarrassing photographs or videos of victims, which frequently do not exist,” the FBI said.

The FBI has been a common hacking target.

In March, the FBI disclosed that it was investigating “suspicious activities” on an internal system that contains sensitive information related to surveillance operations and investigations. Also that month, a pro-Iranian hacking group claimed to have hacked an account of FBI Director Kash Patel and posted online what appear to be years-old photographs of him, along with a work resume and other personal documents dating back more than a decade.

The jobs portal was still offline Wednesday afternoon.

Millions of voters went to polls in Morocco on Wednesday to determine the makeup of the House of Representatives, the parliament’s lower house.

Twenty-seven political parties are competing for 395 seats in the country’s 12th legislative election since independence in 1956.

Almost 16 million people are able to vote, with 55 percent residing in urban areas and 45 percent in rural regions, seeing a mix of concerns among voters.

Economic frustrations

While King Mohammed VI will maintain most executive powers, the new government will manage many public affairs for the coming years.

Once the votes are counted, the king will appoint the head of government from the leading party, but they will still need the support of 198 deputies – an absolute majority – to gain parliamentary confidence.

The election comes at a time of mounting challenges for the country, with the economic situation creating discontent and frustration, Mohammed Masbah, head of the Moroccan Institute for Policy Analysis, told Al Jazeera.

“The upcoming elections will have special importance because they come in a context tied to a social and economic crisis, especially high prices and the cost of living on one hand,” Masbah told Al Jazeera.

“On the other hand, there is a state of frustration among broad segments of society, especially the youth. The Gen Z protests last year, as well as the attempt to cross towards Ceuta a few weeks ago, demonstrate this crisis.”

The introduction of a new financial system designed to support candidates aged 35 could encourage more youth participation. But the nearly six million Moroccans residing overseas, many of them younger citizens, will have to appoint a proxy in Morocco to cast their vote.

There is also an upcoming key milestone for the country with the 2030 World Cup, which requires huge investments. What will remain in the minds of most voters is the state of the economy and inflation, which have impacted the living standards of many Moroccans.

“I believe the upcoming elections will produce a government majority whose primary function will be to address these imbalances, especially the economic ones related to the high cost of living in Morocco,” Masbah said.

“Regarding the issues that were raised and discussed by the majority of political parties, whether represented in the government or the opposition, they are the issue of employment and high prices.”

Two of the main parties competing in the election, the National Rally of Independents and the Authenticity and Modernity Party, have put these issues at the front of their campaigns in what has been a heated election.

“Of course, this is the main topic, but in the public debate, we also noticed conflicts, especially between the top two parties currently running the government,” Masbah said. “We noticed mudslinging and accusations of squandering funds and stealing candidates, which may increase voter alienation from voting today.”

Despite the tense conditions, Morocco’s Public Prosecution has recorded a significant drop in election-related complaints compared with the 2021 vote.

But legal amendments that criminalise digital offences for the first time – including the dissemination of fake news and false allegations intended to defame candidates or voters – have been introduced. The digital space became the primary arena for violations this year, accounting for 22 complaints.

Masbah said that despite a mood of frustration in Morocco over the government’s inability to manage key economic and social issues, turnout is expected to remain steady, as it has been over the past 20 years, due to structural factors.

“Electoral and voting behaviour in Morocco is not primarily linked to electoral programmes and promises [of parties], as much as it is linked to the stable bloc formed by Moroccan deserts and villages, which relies primarily on a network of notables who have influence and the ability to win voters’ voices through utilitarian voting,” Masbah said.

“I expect that if there is a decline in the voting rate – and this is likely – it will not be catastrophic or a sharp decline, given the consideration I mentioned earlier, which is the focus on notables and traditional elites in winning over voters.”