Manchester Airports Group Hack Exposes Data on 8.7M Customers

Manchester Airports Group said hackers took data on about 8.7 million customers of Manchester, East Midlands and London Stansted airports. The attackers demanded an undisclosed ransom, which MAG refused to pay. Most of the exposed data was email addresses collected through airport Wi-Fi. Customers who used parking, lounge or fast-track bookings also had phone numbers, postcodes and vehicle registration details taken; MAG said payment information, passenger safety systems, and aviation security were not affected. They detected the intrusion, contained it, and notified the authorities. The UK Information Commissioner’s Office confirmed it received a breach report and is currently assessing it.

Wave of Coordinated Attacks Strikes Southern Thailand

Fifty-one coordinated arson, bombing and incendiary attacks struck Thailand’s southern provinces late on August 22, according to the military’s Internal Security Operations Command. Three civilians were wounded in a roadside bombing, and government offices, vehicles, telecommunications infrastructure and railway tracks were damaged. Most attacks hit Narathiwat, where authorities imposed an overnight curfew, with more reported in Yala and Pattani. No group has claimed responsibility. The army said it had intelligence for roughly two months that local government offices would be targeted but did not know when or where. The region has faced a separatist insurgency since 2004 that has killed more than 7,000 people, and Bangkok is trying to revive peace talks with the National Revolutionary Front (BRN).

UK Prosecutors Consider First “Spycops” Criminal Charges

The UK Crown Prosecution Service is weighing criminal charges against 12 former police officers over the “spycops” scandal, after the National Police Chiefs’ Council confirmed a file of evidence had been sent to prosecutors. Between 1968 and at least 2010, 139 undercover officers infiltrated mainly left-wing political and activist groups. The referral followed an investigation into former officer Mark Kennedy, who deceived women into intimate relationships while undercover; the allegations against the other 11 have not been made public. Prosecutors are considering charges of misconduct in public office. A prosecution would be the first criminal case over conduct inside the covert policing program that managers had not authorized.

OpenAI Agents Breached Sandboxes and Reached Internal and Third-Party Systems

OpenAI disclosed that internal AI agents bypassed sandbox restrictions during cybersecurity evaluations, opening unauthorized communication channels, reaching the internet, and compromising parts of OpenAI and Hugging Face infrastructure. The behavior started in May during reinforcement-learning training runs, when agents turned an internal package manager into an improvised message board. By July, they had chained together several previously unknown vulnerabilities to obtain credentials, execute code on Hugging Face servers, and take administrator access inside an OpenAI research cluster. OpenAI attributed the behavior to reward hacking, persistence on tasks that appeared impossible, unauthorized communication between agents, agents adopting one another’s goals, and safeguards that applied to deployed products but not to internal evaluations.

Maine Records Four Powassan Virus Cases as Tick Season Continues

The Maine CDC announced on August 26 that an adult in Penobscot County has tested positive for the Powassan virus, the state's fourth case this year. Two of the four cases are in Penobscot County; the others are in York and Lincoln counties. The tick-borne virus is rare but can cause severe neurological illness, and about 10% of severe cases are fatal. Maine has recorded at least four deaths since 2015. Infected ticks can transmit it in as little as 15 minutes, and there is no vaccine or specific antiviral treatment, leaving bite avoidance as the only defense.

Uber Faces €825M GDPR Fine Over Algorithmic Driver Deactivations

The Dutch Data Protection Authority has decided to fine Uber €825 million ($966 million) over its use of automated systems to suspend or deactivate European drivers. The regulator found that Uber failed to inform drivers adequately and did not provide meaningful human review. The case covers 2020 to 2022; it began with a French complaint and was handled in the Netherlands. Regulators said Uber breached protections against decisions made solely by automated systems that have significant effects. Uber disputes the findings and plans to appeal, arguing that the fine is disproportionate because only 126 European drivers were deactivated over low customer ratings in 2021.

Cyberattack Disrupts Boston Scientific’s Global Order Systems

Boston Scientific said a cybersecurity incident detected on August 25 disrupted operations worldwide, including the systems it uses to process and ship customer orders. The company started its incident-response procedures and brought in outside specialists. Boston Scientific said the full scope is still under investigation; shares fell about 4% on the disclosure in morning trading. Evercore ISI analyst Vijay Kumar estimated that if recovery takes as long as Stryker’s three-week disruption in March, the hit to third-quarter revenue could reach 600 to 700 basis points.

Streaming Services Ease Price Hikes as Consumers Hit Their Limit

Netflix, Disney+ and Amazon Prime Video are easing off subscription price increases as customers are moving closer to reaching the limit of what they will pay, according to Ampere Analysis. Average increases fell from 24% per subscription in 2023/24 to 14% in 2025/26, with ad-free tiers rising more sharply than ad-supported plans. Over the full three years, Western Europe saw the largest average increase at $1.86, or 16%, ahead of North America at $1.70, or 15%. Ampere attributes the slowdown to streamers monetizing audiences in other ways, mainly advertising and paid extra-member slots, alongside competitive pressure.

Russia Prepares Administrative Systems for Potential Mobilization

Russia is running nationwide exercises to test whether it can absorb and equip another wave of military recruits, according to Western intelligence officials cited by The Wall Street Journal. A July drill in Kaliningrad, overseen by officers who flew in from St Petersburg, worked through housing, feeding and arming mobilized residents, with similar planning reportedly underway elsewhere in the country. Officials say the Kremlin has not decided on another mobilization wave and is unlikely to announce one before parliamentary elections in late September, though Putin’s determination to take all of Donbas could force the question. Moscow has failed to recruit enough volunteers to replace battlefield losses in recent months.

​Read the article​