❌

Normal view

The power of AI is worrying senior Labour figures – as is the fear of ‘falling behind the public’

17 October 2026 at 07:33

Westminster appears to be waking up to warnings over AI safety, with concerns over its use by extremist groups and bad actors

“I have this sense that, within a few months, AI is going to be all anyone is talking about,” said one cabinet minister, with an ominous stare.

It was Labour conference, with everyone from ministers to activists jubilant at Andy Burnham’s takeover and a bounce in the polls after the change of leader.

Continue reading...

© Photograph: MASTER/Getty Images

© Photograph: MASTER/Getty Images

© Photograph: MASTER/Getty Images

Dogmatic Nordic liberals v eastern family values: culture-clash drama Fjord touches nerves in Norway and Romania

16 October 2026 at 02:00

Cristian Mungiu’s Cannes winner echoes the news story of a Romanian couple whose children were taken by the Norwegian government. As it heads to London film festival, two writers explain how the film exposes real hypocrisies

When Cristian Mungiu’s Fjord was shown in Romania as a one-day preview this June, the reception was extraordinary. Across 53 towns and 96 cinemas, the film reportedly pulled in over 40,000 viewers in a single night, a number arthouse cinema rarely sees in Romania. But the response here had little to do with cinema. It felt instead like a reopening of a familiar fault line about the clash of values within the EU itself.

Continue reading...

© Photograph: ©Tudor Panduru

© Photograph: ©Tudor Panduru

© Photograph: ©Tudor Panduru

The UK must have digital sovereignty | Letters

15 October 2026 at 12:51

The government must stop allowing foreign companies to have access to our sensitive data, writes Ian White. Plus a letter from Bill Cawley

The UK cannot become dependent on foreign AI technology that can be switched off at short notice, says George Williamson, head of the Alan Turing Institute (Report, 10 October). The growing opposition to Palantir, an American company, having government contracts that give it access to sensitive data are all part of the same issue. The UK does not have digital sovereignty.

This is not a theoretical problem. The US government imposed targeted sanctions on the international criminal court, stopping all digital services to certain individuals. This could happen to a country.

Continue reading...

© Photograph: Neil Hall/EPA

© Photograph: Neil Hall/EPA

© Photograph: Neil Hall/EPA

Netherlands, Belgium Face Grocery Supply Disruptions After Ahold Delhaize Incident

14 October 2026 at 02:03

Ahold Delhaize cyber incident

A Ahold Delhaize cyber incident has disrupted parts of the grocery retailer's IT infrastructure, prompting the company to take some systems offline while its teams investigate and mitigate the issue. Although stores remain open, reports from the Netherlands and Belgium indicate that the incident is affecting distribution operations, customer service and some delivery-related activities.
Ahold Delhaize confirmed the security issue in a statement but did not disclose its nature or explain whether customer or employee information had been compromised. The company said its teams were working to assess and contain the problem, adding that protecting its infrastructure was a priority. "Protecting our infrastructure in the best interest of our customers, associates and partners is a top priority. We apologize for any inconvenience this issue may have caused customers and partners," reads the release. The retailer also apologized for any inconvenience caused due to Ahold Delhaize cyber incident to customers and business partners. It has not provided a timeline for restoring all affected systems.

Ahold Delhaize Cyber Incident Affects IT Systems

Ahold Delhaize operates across nine countries, including the United States and several European markets, and employs more than 384,000 people. Its American grocery brands include Food Lion and Stop & Shop. The company has not confirmed whether the Ahold Delhaize cyber incident involves ransomware, a data breach or another form of cyberattack. It also has not provided details about the systems affected or the extent of the disruption across its operations. Reports from employees and customers suggest that the effects of Ahold Delhaize cyber incident are extending beyond internal IT systems. Food Lion employees in the United States have discussed the incident on social media, with managers reportedly describing it as an IT outage. [caption id="attachment_114748" align="aligncenter" width="600"]Ahold Delhaize Cyber Incident Image Source: Reddit[/caption]
[caption id="attachment_114750" align="aligncenter" width="600"]Ahold Delhaize Cyber Incident Image Source: Reddit[/caption]
A Stop & Shop customer also reported delivery-related concerns on social media, complaining about a lack of information and an estimated delivery time for an order scheduled for Thursday. These reports indicate operational difficulties, although the company has not publicly confirmed the specific causes of the individual disruptions.

Albert Heijn IT Outage Disrupts Distribution Centers

In the Netherlands, several Albert Heijn distribution centers have reportedly come to a standstill following the digital security incident. The disruption could affect product availability in stores if deliveries are delayed. According to VRT News, customers are temporarily unable to place orders for the current week. Customer service has also been temporarily unavailable, although the retailer's app and website remain accessible. The situation has raised concerns about the potential impact on grocery supply chains, particularly where distribution centers support stores across national borders. Albert Heijn's distribution center in Tilburg, which supplies stores in Belgium, is also affected by the incident. However, Albert Heijn Belgium said the impact on its operations remains limited for now. The Belgian business said it handles smaller volumes and can temporarily use other distribution centers to maintain supplies. Nevertheless, some products could become temporarily unavailable at certain stores.

Stores Remain Open as Investigation Continues

Despite the reported IT and distribution problems, Ahold Delhaize has said its stores remain open and continue serving customers. Delhaize also confirmed that its stores in Belgium and Luxembourg remain open, allowing customers to shop as usual. The company said it had taken immediate measures to protect its IT systems and that its teams were working to restore operations. Data security remains a central concern as the investigation continues. In its statement, the company emphasized that protecting customer, employee and partner data was its highest priority. However, the available information does not establish whether any data was accessed, stolen or exposed during the incident. The absence of a confirmed recovery timeline also leaves uncertainty around when all affected systems and services will return to normal.

Customer Data Protection Remains a Key Concern

The Ahold Delhaize cyber incident highlights the operational consequences that a security issue can have across a large grocery retail network, particularly when IT systems and distribution infrastructure are affected simultaneously. For now, the company has confirmed the security issue and the steps being taken to mitigate it, but several important questions remain unanswered. These include the cause of the incident, the full scope of the disruption, whether sensitive information was affected and when normal operations will resume. Until further details emerge, the extent of the incident's impact on customers, employees and supply chains remains unclear.

Morocco Flags AI Threats, Prioritizes Critical Infrastructure Defense

13 October 2026 at 01:24

Morocco cybersecurity strategy

Morocco’s cybersecurity strategy is placing greater emphasis on proactive threat detection, critical infrastructure protection and artificial intelligence as the country strengthens its defenses against evolving cyber threats. Abdellatif Loudiyi, Minister Delegate to the Head of Government in charge of National Defense Administration, said securing information systems has become a necessity as digital transformation accelerates. Speaking at the opening of National Cybersecurity Week in Rabat on Monday, Loudiyi stressed that cybersecurity must be integrated into institutional governance rather than treated as an additional expense. He called for stronger preparedness, early threat detection and coordinated responses to cyber incidents. The event, organized by the General Directorate of Information Systems Security under the National Defense Administration, runs from October 12 to 14 under the theme “Cybersecurity in the service of digital transformation and development.”

Morocco Cybersecurity Strategy Emphasizes Proactive Defense

Loudiyi said cyberattacks have become a tangible reality affecting countries worldwide, including developed nations. Their consequences have raised awareness among public and private institutions about the importance of cybersecurity in managing risks and protecting operations. He argued that organizations can no longer rely on responding to incidents after they occur. Instead, they need an approach centered on preparedness, vigilance, early detection, and response. According to the minister, these responsibilities must begin at the highest levels of institutional decision-making and extend across organizations, with each component accountable for its role. He also emphasized that cybersecurity resilience requires continuous work. As attackers develop new methods, institutions must regularly review protection measures, assess system readiness, and adapt their defenses to emerging threats.

Five Pillars to Strengthen National Cybersecurity

The minister outlined five interconnected areas supporting Morocco’s efforts to establish a coordinated national cybersecurity framework. These include a clear legal and regulatory framework, the development of human, technical and financial capabilities, greater public awareness and a stronger cybersecurity culture, enhanced monitoring and response capabilities, and regional and international cooperation. Loudiyi stressed that these elements must function together to strengthen national resilience. He also highlighted the shared responsibilities of government authorities and organizations operating information systems. While the General Directorate of Information Systems Security exercises its legally defined powers, individual system owners must protect their systems and allocate the resources required to do so. The minister said this integration of responsibilities is essential to building a cohesive national cybersecurity system.

AI Threats and Critical Infrastructure Protection Take Priority

Looking ahead, Loudiyi identified four priorities for the next phase of Morocco’s cybersecurity efforts: training specialized cybersecurity professionals, supporting national cybersecurity companies, strengthening critical infrastructure protection, and addressing the challenges associated with artificial intelligence. He described artificial intelligence in cybersecurity as a dual-use capability that can benefit both attackers and defenders. While attackers can use AI to support malicious activities, defenders can apply the technology to detect threats earlier and accelerate incident response. The emphasis on specialized training also reflects the need to develop the expertise required to address increasingly complex cybersecurity challenges. Supporting national companies is another priority identified by the minister as part of the broader effort to strengthen the country's capabilities. Loudiyi said these priorities should help Morocco prepare not only for existing threats but also for risks that may emerge as technologies and attack methods evolve.

Morocco Calls for Stronger International Cybersecurity Cooperation

Loudiyi also highlighted the role of cybersecurity cooperation in strengthening national defenses. He said Morocco remains committed to initiatives and mechanisms that promote collaboration between countries, with particular attention to its African and Arab partners. He presented cybersecurity as a shared responsibility requiring coordination, investment in skills and a sustained culture of awareness and vigilance. The minister concluded that a secure digital environment depends on collective efforts to protect information systems and maintain trust as digital transformation advances. National Cybersecurity Week provides a platform for these discussions through roundtables and workshops involving decision-makers, cybersecurity experts and industry professionals. The October 12 to 14 program is intended to encourage dialogue and the exchange of views on key cybersecurity challenges and approaches to addressing them.

‘There was a chance to stop him’: Parents react with fury to paedophile nursery worker revelations

More than 50 families call for investigation into how Vincent Chan was allowed to return to job after inquiry by nursery

The parents of the victims of paedophile nursery worker Vincent Chan have reacted with fury to the news that he was cleared to return to work after “significant concerns” were raised by the parent of a young girl.

As first revealed in the Guardian, Chan was reported to his employer, the nursery chain Bright Horizons, by a concerned parent in 2021.

Continue reading...

© Photograph: Metropolitan Police/PA

© Photograph: Metropolitan Police/PA

© Photograph: Metropolitan Police/PA

A new approach to tackle sexual abuse in schools | Letters

12 October 2026 at 12:38

Responding to an editorial on the extent of sexual abuse of pupils by their peers, a reader calls for more nuance and compassion. Plus a letter from Donna Hill

As a paediatrician specialising in the care of children who have been sexually abused, I am well aware of sexual harm that occurs in school settings by peers (Editorial 5 October). This is just one aspect of the wider issue of children and young people who sexually harm other children and young people.

Of all the children my organisation cares for, 30% are harmed by other children – data we shared with the children’s commissioner in their report in 2023 on the impact of pornography on harmful sexual behaviour on children.

Continue reading...

© Photograph: Adrian Sherratt/Alamy

© Photograph: Adrian Sherratt/Alamy

© Photograph: Adrian Sherratt/Alamy

Tabung Haji Services Back Online After October 8 Cyberattack, Depositors’ Savings Confirmed Safe

12 October 2026 at 03:16

Tabung Haji cyberattack

Lembaga Tabung Haji (TH) has resumed its key systems and services after a Tabung Haji cyberattack on Oct 8 led to a temporary suspension, and the agency says depositors’ savings are safe. In a statement issued today, TH said the reactivation followed comprehensive security checks, the strengthening of controls and system recovery measures.

The agency also said it worked with national cybersecurity authorities to address the threat and reinforce system security, so that the reactivated services can operate safely. TH has lodged a police report and continues to monitor its systems closely.

Tabung Haji Cyberattack Led to Suspension Across All Channels

On Oct 8, TH temporarily suspended system and service operations across all channels. The agency said the suspension was meant to protect depositors’ savings and personal information after the attack caused service disruptions.

TH described the Tabung Haji cyberattack as a criminal act against TH and the nation, intended to disrupt its services. After the incident, its internal team worked with external experts and national cybersecurity authorities to investigate the event, address the threat and restore the systems.

Branches Reopen After Cyberattack

According to the statement, TH branches in Kedah, Terengganu and Kelantan resumed operations yesterday. Branches in other states opened as usual today. Services provided through strategic banking partners have also been reactivated.

The statement said the reactivation followed those checks and recovery measures. It added: “TH assures that depositors’ savings are safe. Close monitoring and security enhancements will continue to ensure that the reactivated systems and services operate safely and smoothly.”

THiJARI Platform Functions Still Pending Restoration

TH also announced that all functions of the THiJARI platform have resumed operations, with three exceptions. Password resets, new user registration and online account opening remain unavailable.

The agency said these three functions still require further restoration work before they can be reactivated. Updates will be communicated through TH’s official channels from time to time.

TH lodged a police report over the incident and notified the mNational Cyber Security Agency (NACSA) and the Department of Personal Data Protection (JPDP). It has collaborated with cybersecurity authorities to address the threat and reinforce system security, which it said ensures the safety of the reactivated services.

Guidance for Depositors After the Tabung Haji Cyberattack

TH urged depositors who detect unusual transactions, or who need assistance or have inquiries, to contact the TH Contact Centre (THCC) immediately at 03-6207 1919. The agency said it continues to monitor its systems closely and will keep strengthening security.

TH also thanked depositors for their patience, cooperation and support during the restoration period. “We once again apologise and deeply regret the incident; however, these measures were necessary to safeguard depositors’ savings,” the statement said.

Timeline at a Glance

  • Oct 8: TH suspends system and service operations across all channels after the cyberattack.
  • After the incident: TH’s internal team, external experts and national cybersecurity authorities investigate and restore the systems, a police report is lodged, and NACSA and JPDP are notified.
  • Yesterday: Branches in Kedah, Terengganu and Kelantan resume operations.
  • Today: Branches in other states open as usual.
  • Also confirmed: services through strategic banking partners have been reactivated.
  • Still pending: THiJARI password resets, new user registration and online account opening.

What Is Confirmed So Far

Based on the statement, three points are confirmed. Depositors’ savings are safe, key systems and services have resumed, and three THiJARI functions are still being restored.

TH said it will continue close monitoring and security enhancements, and it will share further updates through its official channels. Depositors with concerns can reach the THCC at 03-6207 1919.

How to tackle serious safeguarding gaps in nurseries | Letter

11 October 2026 at 11:52

Tulip Siddiq and a parent urge the government to take a number of steps to keep children safe, in response to an editorial

Your editorial on early years provision (The Guardian view on nurseries: some things are going right for under-fives, 4 October) ends by referring to the horrifying case of Vincent Chan, who worked at Bright Horizons nursery in north-west London. We write as the MP representing the constituency in which the nursery is situated and as the parent of children who attended the nursery and were victims of Chan. We believe his case exposed serious gaps in the safeguarding system that urgently need addressing by government.

First, CCTV should be mandatory in nurseries. When used with appropriate safeguards, it can provide both a deterrent and an important source of evidence when allegations are made.

Continue reading...

© Photograph: Matt Cardy/Getty Images

© Photograph: Matt Cardy/Getty Images

© Photograph: Matt Cardy/Getty Images

Alleged abuse victims at British military school in Germany tell of agonising fight for justice

10 October 2026 at 05:00

Two women, now in their 50s, say MoD refuses to take responsibility for abuse they suffered as children

Anne and Jane* were 10 years old when a member of staff connected with their British military school in Bünde, Germany is alleged to have singled them out and sexually abused them.

Now in their 50s, the women say he coerced them into keeping silent, and for decades they had only discussed their experiences with one another. “He said if we ever told anybody, then our fathers would lose their jobs and they would be kicked out of the army,” Jane said. “Being two young 10-year-old girls who basically followed their fathers around the world, their jobs were our lives.”

Continue reading...

© Composite: Guardian Design/Getty Images

© Composite: Guardian Design/Getty Images

© Composite: Guardian Design/Getty Images

8.8 Million People Affected in Major Denmark Data Breach

6 October 2026 at 01:50

Denmark data breach

The Denmark data breach has exposed the names, addresses and CPR numbers of approximately 8.8 million people after unauthorized users exploited a Danish company's legitimate access to the country's Central Person Register (CPR), according to the Danish government. The CPR administration became aware of irregular behavior in the system on October 2, after identifying activity that had occurred during September. An investigation found that unauthorized individuals had used a private Danish company's legal access to search the CPR system and obtain information on millions of registered people. The CPR currently contains information on approximately 11 million registered people, including those who are living in Denmark, people who have moved abroad and deceased individuals.

Denmark Data Breach Involved Legitimate CPR Access

The Denmark data breach did not result from unauthorized access being granted directly to the attackers. Instead, unauthorized users abused a private company's legitimate access to the CPR system. Under Section 38 of Denmark's Civil Registration Act, private companies with a legitimate interest can receive information from the CPR about specific groups of people they have individually identified in advance. Companies must also be entitled to receive the information under the General Data Protection Regulation and Denmark's Data Protection Act. The investigation found that unauthorized individuals used this legitimate access to retrieve information from the register. The exposed information includes names, addresses and CPR numbers, which serve as personal identification numbers in Denmark. The CPR administration said the unauthorized access did not include the names and addresses of people who had registered for name and address protection.

Investigation Into CPR Data Breach Continues

The CPR administration has stopped the company's access to the system and is working with specialists and relevant authorities to establish how the incident occurred. The case has been reported to the Danish Data Protection Authority, while police are investigating in cooperation with other relevant authorities. Authorities said the investigation remains in its early stages, and it is not yet possible to identify who was responsible for the unauthorized access. The CPR administration also warned that further investigation could lead to changes or clarification of the information currently available about the incident. Denmark's Minister of Research, Education and Digitalisation Christina Egelund described the incident as serious and said a thorough security review of the CPR system would be conducted. Additional measures have also been launched to prevent similar incidents.

What the Denmark Data Breach Means for Citizens

Authorities have reminded citizens not to provide passwords or other confidential information during phone calls or email exchanges, even when the person making contact appears to know their name, address or CPR number. Guidance is available through Denmark's Sikker Digital service, while the Cyberhotline for digital security has extended its opening hours from 8 a.m. to midnight in the coming days. The incident also highlights the risks associated with legitimate access to sensitive databases. In this case, the access used to obtain the information was originally available to a private company under Denmark's existing rules for accessing CPR data.

Cybersecurity Awareness Month Puts Data Protection in Focus

The Denmark data breach comes during October's Cybersecurity Awareness Month, a period focused on improving awareness of digital security risks. The incident highlights why protecting access to sensitive personal information remains an important part of cybersecurity. For organizations handling large volumes of personal data, the case also shows the importance of monitoring legitimate access and identifying unusual activity. However, Danish authorities have stressed that the investigation is still underway and that the full circumstances of the incident have yet to be established.

Who’s to Blame When A.I. Goes Rogue?

2 October 2026 at 05:21
Many think artificial intelligence companies should be held liable for their runaway technology. But legal scholars say applying existing law could be messy.

© Antonio Sortino

Amazon Settles Lawsuit Over Claims of Slow Deliveries to Low-Income Areas

1 October 2026 at 15:17
The tech giant will refund $7.25 million in Prime membership fees to affected customers and pay an additional $1 million to settle the suit brought by the District of Columbia.

© Lucia Vazquez for The New York Times

The District of Columbia’s attorney general said in a 2024 lawsuit that Amazon had excluded two ZIP codes from its in-house Prime delivery services.

F.T.C. Investigates OpenAI and Anthropic Over Potential Consumer Harms

30 September 2026 at 15:26
The agency will examine whether A.I. labs have broken federal laws prohibiting companies from unfair and deceptive practices.

© Al Drago for The New York Times

The Federal Trade Commission building in Washington. The agency is examining whether top A.I. companies have harmed consumers, a person with knowledge of the inquiry said.

Elon Musk Has Pledged to Rid His Platform, X, of Child Sexual Abuse, but It Persists

11 September 2026 at 05:01
Reviews by the Canadian Center for Child Protection and The New York Times found that explicit images of children remain on the social media site owned by Elon Musk.

© Andres Kudacki for The New York Times

Elon Musk bought X, which was then known as Twitter, in 2022 and vowed to remove child sexual abuse material from the site, calling it “Priority #1.”

California’s Governor Signs Landmark Online Child Safety Bills

10 September 2026 at 16:49
Gov. Gavin Newsom signed a bill that prohibits social media platforms from providing addictive features to users under 16, the first law of its kind in the nation.

© Eric Ryan Anderson for The New York Times

Gov. Gavin Newsom’s actions follow a series of social media trials this year, in which thousands of teenagers, schools and states have accused Meta, Snap, TikTok and YouTube of hooking young users with products being compared to cigarettes.

How Meta’s $17.1 Billion Social Media Settlement Came Together

29 August 2026 at 07:00
State attorneys general spent months in negotiations. Then, as its legal losses mounted, the social media giant’s new top lawyer brought a huge settlement to the table.

© Jason Henry for The New York Times

Meta’s $17.1 billion agreement with states followed losses in court over claims that the social media is addictive and harmful to children.

Prediction Markets Should Be Regulated as Gambling, Appeals Court Says

28 August 2026 at 19:15
The outcome contradicted an earlier appeals court decision. Federal regulators said the split rulings called for resolution by the Supreme Court.

© Eric Helgas for The New York Times

Prediction markets, notably Kalshi, have exploded in popularity this year.

Social Media and the Myth of the Big Tobacco Moment

28 August 2026 at 14:52
Smoking used to be everywhere, the way Facebook, TikTok, Snap, YouTube and Instagram are now. Society decided to break the habit, but it took a long time.

© Jason Henry for The New York Times

Meta will pay up to $17.1 billion over a decade and make changes to its social media properties to make them less compulsive for young people.

OpenAI Introduces ‘ChatGPT for Teens’ as Safety Concerns Grow

18 August 2026 at 10:14
The artificial intelligence start-up announced a chatbot mode that will automatically limit some conversations to better protect young users.

© Ricardo Nagaoka for The New York Times

A workshop about artificial intelligence at Walla Walla High School in Washington in 2023. ChatGPT will turn on its teen mode if it detects signals that the user is younger than 18, OpenAI said.

Meta to Stand Trial Over Claims It Addicted Children to Social Media

19 August 2026 at 00:58
California, Colorado, Kentucky and New Jersey have taken the social media giant to trial in the first bellwether federal case over child harm.

© Jason Henry for The New York Times

During the trial, to be held in the U.S. District Court of Oakland, Calif., four states are expected to argue that Meta violated federal child privacy and state consumer protection laws.
❌