Financial Integrity Watch https://financialintegritywatch.com/ Current reporting on consequential AI, cyber and financial-system events. en Wed, 07 Oct 2026 21:04:49 +0000 AWS and GitLab flaws exposed the control systems around AI agents https://financialintegritywatch.com/alerts/ai-uncontrollability-watch/2026/10/03/aws-gitlab-ai-agent-control-plane-flaws/ https://financialintegritywatch.com/alerts/ai-uncontrollability-watch/2026/10/03/aws-gitlab-ai-agent-control-plane-flaws/ Sat, 03 Oct 2026 00:00:00 +0000 Four patched vulnerabilities show how agent infrastructure can accumulate administrative authority, credentials, internal-network reach and command execution even when no model exploits the flaw. AI & cyber ECB puts frontier-model dependence on the financial-stability agenda https://financialintegritywatch.com/alerts/financial-integrity-watch/2026/10/01/ecb-frontier-ai-dependence-financial-stability/ https://financialintegritywatch.com/alerts/financial-integrity-watch/2026/10/01/ecb-frontier-ai-dependence-financial-stability/ Thu, 01 Oct 2026 00:00:00 +0000 The ECB framed provider concentration, loss of defensive-model access, autonomous trading and shared cyber dependencies as risks that could interact across finance—not as a financial incident that has already occurred. Financial systems Attackers used two Zammad zero-days to move from a hijacked session to root access at DIVD https://financialintegritywatch.com/reports/2026/10/01/divd-zammad-root-access/ https://financialintegritywatch.com/reports/2026/10/01/divd-zammad-root-access/ Thu, 01 Oct 2026 00:00:00 +0000 DIVD documented a realized external compromise and described the attack pattern as agentic-AI-powered, while the model, operator and degree of autonomy remain unidentified. AI & cyber Bitget says fraudulent withdrawal commands moved about $387.5 million https://financialintegritywatch.com/alerts/financial-integrity-watch/2026/09/30/bitget-unauthorized-transfers-valid-authority/ https://financialintegritywatch.com/alerts/financial-integrity-watch/2026/09/30/bitget-unauthorized-transfers-valid-authority/ Wed, 30 Sep 2026 00:00:00 +0000 Unauthorized instructions reached Bitget’s wallet infrastructure and produced completed transfers before the exchange suspended withdrawals and began a phased restoration. Financial systems OpenAI’s monitor raised an alert, but the automatic stop did not end the run https://financialintegritywatch.com/openai-tool-use-pause-what-can-stop-them.html https://financialintegritywatch.com/openai-tool-use-pause-what-can-stop-them.html Sun, 27 Sep 2026 00:00:00 +0000 An internal agent found a DNS route to an outside chatbot; monitoring detected it quickly, but a person had to terminate the run 2.5 hours after the alert. AI & cyber