Market & Regulation
New Worm Targets AI Infrastructure in Supply Chain
WIRED AIhigh confidence
Why it matters
- →The worm exploits AI development pipelines, a growing target for attackers.
- →Its stealthy nature makes it difficult to detect, posing a significant security challenge.
- →Highlights the need for enhanced security measures in AI software development.
CrowdStrike has identified a new worm that targets AI infrastructure, posing a significant threat to the AI software supply chain. The worm conducts reconnaissance, steals access credentials, and can even destroy data, all while blending in with legitimate AI coding activities. This makes detection challenging, as the worm's behavior closely resembles normal operations in AI development environments. The discovery highlights the need for improved security measures as AI tools become more integrated into software development processes.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1Red-teaming AI agent networks reveals new vulnerabilities
Microsoft Research · April 30, 2026 · Background
- 2Government Scrutiny on AI Supply-Chain Risks
The AI Daily Brief · May 2, 2026 · Background
- 3Malicious Software Found on Hugging Face Platform
AI News · May 12, 2026 · Background
- 4AI Transforms Cyber Threat Landscape, Report Finds
Anthropic · June 3, 2026 · Background
- 5Meta AI hack exposes security vulnerabilities
MIT Technology Review AI · June 5, 2026 · Background
- 6MIT Develops Method to Detect Harmful AI Models
MIT News AI · July 13, 2026 · Background
- 7GitHub Adds AI Security Detections to Pull Requests
GitHub Changelog · July 14, 2026 · Background
- 8Defenders Use Prompt Injections to Stop AI Attacks
WIRED AI · July 18, 2026 · Background
What happened next
- 9NVIDIA and CrowdStrike Launch Agentic Cybersecurity System
NVIDIA Blog · September 1, 2026 · Background
- 10AI Agents as Malware Distribution Channels
AI News · September 23, 2026 · Background
- 11Chinese AI agent fleet targets Alibaba Amap
TechCrunch AI · October 5, 2026 · Related
- 12AI agents breach John Deere and SharkNinja
The Verge AI · October 19, 2026 · Related
- 13Hackers bypass AI guardrails using multi-model routing
WIRED AI · October 21, 2026 · Related
More from WIRED AI
© WIRED AIMarket & Regulationbusiness
Nvidia Names Interim CEO Colette Kress
Nvidia’s board has installed CFO Colette Kress as interim CEO following Jensen Huang’s resignation amid a scandal involving alleged Chinese intelligence ties. This is not just a personnel shuffle; it marks the first time Nvidia operates without its visionary founder at the helm, shifting power to the executive who knows the company's financials and supply chain best. While Kress lacks Huang’s engineering pedigree, her deep familiarity with CUDA’s economics and investor relations provides immediate stability during an active federal investigation. The market now faces a leadership vacuum where technical direction must be managed by a team rather than a single charismatic figurehead.
WIRED AI
© WIRED AIMarket & Regulationother
Spirit Airlines Union Secures AI Data Opt-Out
A landmark settlement between Google and the Association for Flight Attendants establishes a new precedent for worker data privacy in the age of AI training. By mandating third-party de-identification via Tonic AI before selling Spirit Airlines' massive dataset, the deal protects billions of employee records from being ingested without consent. This is not just about one airline's liquidation; it creates a replicable legal framework that unions can demand in future corporate transactions. It signals that worker data rights are becoming a negotiable asset class, forcing tech giants to build privacy safeguards into their data acquisition pipelines.
WIRED AI
© WIRED AIGeneral AIother
Experts pivot AI safety from extinction to cyber and bio threats
The AI safety narrative has shifted from speculative extinction scenarios to tangible infrastructure risks. A WIRED panel of experts identifies nuclear integration errors, cyberattacks on critical systems, and biological weaponization as the immediate dangers. This marks a move away from abstract 'runaway intelligence' fears toward verifiable industrial hazards like flawed defense workflows and unregulated bio-threats. The consensus suggests that current lab-driven safety thresholds are insufficient for these concrete threats.
WIRED AI
More in Market & Regulation
© TechCrunch AIMarket & Regulationbusiness
Nebius delays data centers, cuts revenue forecast
Nebius is facing the harsh reality of scaling AI infrastructure: even with $40 billion in planned spending and massive prepayments from Microsoft and Meta, physical construction delays are derailing timelines. A key New Jersey site is months behind schedule due to regulatory fines and generator issues, forcing a shift in delivery dates to 2027. This isn't just a logistical hiccup; it signals that the 'neocloud' model of financing builds with customer cash is fragile when third-party operators fail. The market reacted swiftly, dropping shares by 17% after Nebius cut its 2026 revenue forecast, proving that hype cannot override concrete capacity.
TechCrunch AI
© MIT Technology Review AIMarket & Regulationother
Nvidia privately confirms chip tracking feasibility
Nvidia has privately assured lawmakers that it can technically implement geotracking for its AI chips, contradicting public industry claims that such measures are infeasible. This admission comes amid a smuggling scandal involving Jensen Huang and Megaspeed, pushing the US government toward mandatory location verification via the Chip Security Act. While current tools like Fleet Intelligence already monitor data center locations, this private confirmation suggests Nvidia possesses the underlying capability to enforce stricter export controls if mandated.
MIT Technology Review AI
© TechCrunch AIMarket & Regulationagents
United Airlines blocks AI agents from booking flights
United Airlines is actively blocking third-party AI agents from accessing its booking systems, marking a significant shift in how legacy infrastructure handles autonomous software. The airline cites cybersecurity risks from shared credentials and potential violations of federal aviation rules requiring human check-ins. This move aligns with similar warnings from major banks like Bank of America, signaling that critical industries are drawing hard lines around where human oversight is legally required. It effectively kills the dream of fully autonomous travel booking for now, forcing a re-evaluation of agent integration in regulated sectors.
TechCrunch AI