Chinese EV news site D1EV staged a driver-assistance competition in Changsha featuring a Tesla Model Y running an unofficially activated FSD V14. Tesla's legal department called it unauthorized cracking, demanded the content come down, the car's VIN be handed over within 48 hours and the software restored. D1EV's CEO Pang Yicheng refused, saying he doesn't believe anything illegal happened. Unlock tools sell for a few hundred yuan online.
AI agents can now run commands, edit files, and install software for us. On November 10, Microsoft Research described a method called Lazarus that plants a backdoor by rewriting fewer than 10 normally inactive neurons in a language model, with no retraining. The model behaves normally and passes ordinary tests until a secret trigger appears, then outputs an attacker's command. Microsoft says it has not seen anyone use the technique in the wild. This is a lab-demonstrated attack, with figures from Microsoft's own experiments and no independent replication yet.
Most cyberattacks steal data or demand ransom; this one physically wrecked equipment. On November 9, France's Foreign Ministry said hackers broke into refrigeration controls at more than 700 retail sites on the night of October 11-12, driving some freezers from about -27C to above 50C, causing at least 15 fires and tens of millions of euros in spoiled food. Paris blamed Shahid Kaveh, a cyber unit affiliated with Iran's Islamic Revolutionary Guard Corps, called it the first purely destructive offensive cyber campaign on French soil, and said it would summon Iran's ambassador and seek E.U. sanctions. This is an official French attribution, not an independent verdict.
NIST and CISA issue NIST IR 8587, providing implementation guidelines for token security, responding to Executive Order 14306 and enhancing token management.