Door de verwachte ‘Super El Niño’ maakt de Mexicaanse badplaats Acapulco zich op voor een zwaar najaar. Door de hoge zeewatertemperatuur „kan een op het oog normale storm zich binnen enkele uren ontwikkelen tot een orkaan uit de zwaarste categorie”.
/s3/static.nrc.nl/hpe/72fdfc1-HP2.jpg)
Dichteres Asmae Amaddaou laat vol bravoure van zich horen met een weerbare en tegelijk tedere stem. Haar debuutbundel is een aanklacht tegen een wereld waarin immigranten moeten vechten voor het recht om er vanzelfsprekend te mogen zijn.
/s3/static.nrc.nl/wp-content/uploads/2026/09/22133239/240926CUL_2036847565_.jpg)
Wat hebben stromingen in de Atlantische Oceaan met een ouderwets koffiefilter te maken?
/s3/static.nrc.nl/wp-content/uploads/2026/09/22110708/230926WET_2036867907_.jpg)
Het duurt vaak jaren voordat vrouwen met endometriose een diagnose krijgen. Theatermaker Karlijn Kistemaker vecht met haar droogkomische voorstelling ‘Buikzwam’ tegen die onwetendheid.
/s3/static.nrc.nl/wp-content/uploads/2026/09/21113318/Buikzwam-Bart-Grietens-57.jpg)
Arrest of Shadrack Sibiya comes as country reels from cases of femicide and alleged police corruption and criminality
One of South Africa’s most senior police officers has been charged with raping an 18-year-old woman and grooming a 16-year-old girl, as the country’s police face allegations of corruption and failing to tackle violence against women and girls.
Shadrack Sibiya, who was already suspended from his role as deputy national police commissioner over allegations he interfered with political killings investigations, was arrested on Monday. He is facing charges of rape, people trafficking, promoting the sexual grooming of a child and two counts of grooming a child.
Continue reading...Heimir Hallgrímsson accused of ‘stupidity’ by Israel’s FA
Micheál Martin says IFA’s response is ‘unacceptable’
Ireland’s prime minister, Micheál Martin, backed his country’s football manager, Heimir Hallgrímsson, after Israel’s football federation accused Hallgrimsson of “stupidity, ignorance and hypocrisy” over comments about the war in Gaza.
“I think those are unacceptable remarks; they should be withdrawn,” Martin told reporters in New York, where he is attending the UN general assembly. “Israel can’t keep denying what the world knows, and what the world understands.”
Continue reading...IIF highlights challenges facing US, France, UK and Japan, while OECD and IMF also voice global concerns
Three heavyweight international bodies have issued stark warnings about the risks of rising debt levels and soaring borrowing costs across large economies.
The Paris-based Organisation for Economic Co-operation and Development (OECD), the International Monetary Fund (IMF) and the International Institute of Finance (IIF), the voice of global banking, on Wednesday highlighted the dangers of soaring interest rates on $365tn (£275tn) in global borrowing.
Continue reading...KAUB (ANP) - Het waterpeil bij het Duitse Kaub, een belangrijk knelpunt in de Rijn, zakt deze week tot een zeer laag niveau. De waterstanden in de Rijn in Duitsland zijn weer gezakt door de aanhoudende droogte.
Halverwege augustus zakte het waterpeil bij Kaub, nabij Koblenz, al tot onder de 10 centimeter. Destijds was er angst dat de belangrijke waterweg in twee afzonderlijk bevaarbare delen zou worden gesplitst.
De voorspelling van de Duitse binnenvaartbeheerder WSV laat zien dat het waterpeil donderdag opnieuw onder de 10 centimeter zakt. Het waterpeil is gemeten tegen een vastgesteld punt. De vaardiepte bij Kaub is ruim 1 meter dieper dan het waterpeil.
Hoge transportkosten
Eind van de maand lijkt het waterpeil zelfs negatief te worden, volgens de voorspelling. Dat zou betekenen dat er nog amper vracht langs dit punt in de Rijn vervoerd kan worden, stelt binnenvaartexpert Wouter van der Geest.
Duitse bedrijven kampen door de lage waterstanden met hoge transportkosten, omdat schepen met minder lading kunnen varen.
Schakelen we nu over naar de rechtbank van Breda voor de eerste pro-formazitting (inleidend dus) tegen Reinaldas Jurkus (20), de maniakaal racende Litouwer die bij het Zeeuwse Vogelwaarde drie schoolkinderen en een juf overhoop sjeesde. R. Jurkus had nog maar net zijn rijbewijs, werd in de aanloop naar het horrorongeval al ZEVENTIEN keer betrapt op te hard rijden, reed in een ondeugdelijke auto, werd op de DAG VAN HET ONGEVAL drie keer (!) geflitst en op zijn telefoon werden tig stoere beelden aangetroffen 'waarin hij zichzelf en zijn snelheidsmeter filmde terwijl hij met hoge snelheid reed en ook over een dubbele doorgetrokken streep reed'. De raadkamer schreef al: "Deze objectieve omstandigheden laten zien dat verdachte kennelijk weinig zelfinzicht heeft in zijn rijgedrag en ook zijn rijgedrag niet aanpast nadat hij keer op keer in overtreding is van verkeerregels en hierbij overige verkeersdeelnemers in gevaar brengt." En dan nóg zal het lastig worden om 'roekeloosheid' te bewijzen, want 'dat is het allermoeilijkste etiket om te bewijzen'. Hartverscheurend interview met de moeder van Sarah hierrr. Later meer.
Update - Saskia Belleman is er natuurlijk bij. Het is nog niet duidelijk of de dader erbij is, dat hoeft niet bij een pro-formazitting
De politie kreeg woensdagochtend een opmerkelijke melding binnen. Aan de Bokelweg in Schiedam trof de politie een auto zonder deuren aan. Alle vier de autodeuren waren verdwenen.
In dit liveblog houden we je op de hoogte van het belangrijkste en meest opvallende 112-nieuws van woensdag 23 september.
In dit liveblog houden we je op de hoogte van het belangrijkste en meest opvallende 112-nieuws van woensdag 23 september.
In dit liveblog houden we je op de hoogte van het belangrijkste en meest opvallende 112-nieuws van woensdag 23 september.
In dit liveblog houden we je op de hoogte van het belangrijkste en meest opvallende 112-nieuws van woensdag 23 september.
Microsoft's security blog describes the fight against a new "AI-powered cybercrime platform" offering phishing-as-a-service, with AI-tailored lures and analyses of compromised inboxes (to identify high-value targets). The site compromised more than 12,000 inboxes in over 10,000 organizations around the world, compromising business accounts "at scale" with automated attacks and prebuilt phishing templates. AI tools could even sift through a victim's mailbox to help engineer better phishing messages.
To disrupt EvilTokens Microsoft worked with other organizations, including Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, Shadowserver Foundation, and TRM Labs to Health-ISAC (a non-profit helping health sector organizations share cyber threat information).
"Fifty sites seized and 150 domains disabled in a single action is only possible when the hosting providers, the exchanges, the model providers and the data holders all move at the same time," security company SpyCloud told The Hacker News.
From Microsoft's security blog:
Microsoft also notified affected customers, helped remediate compromised accounts, and shared intelligence to support further defensive and investigative action... Microsoft worked closely with specialist officers from the Metropolitan Police Service's cybercrime team, sharing intelligence that enabled officers to take operational action in the United Kingdom. On September 11, 2026, officers arrested two men, aged 32 and 38, and seized digital devices and other items for examination... While EvilTokens used AI to identify targets and prioritize fraud opportunities, Microsoft investigators used reverse engineering and AI-powered tools to analyze evidence, accelerate the investigation, and identify the infrastructure supporting the service...
Campaigns leveraging EvilTokens have impacted organizations in various industries, including wholesale distribution, construction, financial services, real estate, higher education, and healthcare, with the highest concentrations of observed victim activity in the United States, Canada, the United Kingdom, Australia, India, and France. Working with partners, Microsoft's Digital Crimes Unit (DCU) facilitated a coordinated disruption of infrastructure used to operate the EvilTokens service.
Sometimes stolen tokens were used to give new devices access to a victim's inbox. (A code authenticating the new device was sent to the targeted user, who unknowingly authorize the threat actor's session and grants access to their account...) But "AI was not simply helping attackers write more convincing messages," says another Microsoft blog post. "It helped them decide who to target, who to impersonate, and how to most effectively exploit the relationship to extract as much money as possible."
The significance of EvilTokens extends beyond its rapid growth and global reach. It offers an early warning of what happens when cybercriminals combine stolen access with AI capable of understanding how an organization works... Its AI tools could summarize and translate emails, surface financial conversations, map organizational roles, identify trusted relationships, and recommend potential targets. Preset prompts offered to find wire-transfer discussions, identify the organization's "money movers," locate vendor invoices, and determine the best people to impersonate. Sold through Telegram for a $1,500 initiation fee and a recurring $500 subscription, EvilTokens combined account compromise, mailbox analysis, target selection, and fraud preparation in a single service. Capabilities that once required experience across identity attacks, cloud systems, social engineering, and financial fraud were available through a ready-made interface.
Investigators found evidence that large portions of EvilTokens had been "vibe coded," with AI helping its creators build the platform itself. They also determined that EvilTokens drew on capabilities from multiple AI models. The result was more than a collection of attack tools. EvilTokens packaged much of the fraud process into a commercially run service, complete with subscription pricing, customer support, management dashboards, and tools designed to move customers from account access toward financial exploitation.
To disrupt EvilTokens Microsoft worked with other organizations, including Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, Shadowserver Foundation, and TRM Labs to Health-ISAC (a non-profit helping health sector organizations share cyber threat information).
"Fifty sites seized and 150 domains disabled in a single action is only possible when the hosting providers, the exchanges, the model providers and the data holders all move at the same time," security company SpyCloud told The Hacker News.
From Microsoft's security blog:
Microsoft also notified affected customers, helped remediate compromised accounts, and shared intelligence to support further defensive and investigative action... Microsoft worked closely with specialist officers from the Metropolitan Police Service's cybercrime team, sharing intelligence that enabled officers to take operational action in the United Kingdom. On September 11, 2026, officers arrested two men, aged 32 and 38, and seized digital devices and other items for examination... While EvilTokens used AI to identify targets and prioritize fraud opportunities, Microsoft investigators used reverse engineering and AI-powered tools to analyze evidence, accelerate the investigation, and identify the infrastructure supporting the service...
Campaigns leveraging EvilTokens have impacted organizations in various industries, including wholesale distribution, construction, financial services, real estate, higher education, and healthcare, with the highest concentrations of observed victim activity in the United States, Canada, the United Kingdom, Australia, India, and France. Working with partners, Microsoft's Digital Crimes Unit (DCU) facilitated a coordinated disruption of infrastructure used to operate the EvilTokens service.
Sometimes stolen tokens were used to give new devices access to a victim's inbox. (A code authenticating the new device was sent to the targeted user, who unknowingly authorize the threat actor's session and grants access to their account...) But "AI was not simply helping attackers write more convincing messages," says another Microsoft blog post. "It helped them decide who to target, who to impersonate, and how to most effectively exploit the relationship to extract as much money as possible."
The significance of EvilTokens extends beyond its rapid growth and global reach. It offers an early warning of what happens when cybercriminals combine stolen access with AI capable of understanding how an organization works... Its AI tools could summarize and translate emails, surface financial conversations, map organizational roles, identify trusted relationships, and recommend potential targets. Preset prompts offered to find wire-transfer discussions, identify the organization's "money movers," locate vendor invoices, and determine the best people to impersonate. Sold through Telegram for a $1,500 initiation fee and a recurring $500 subscription, EvilTokens combined account compromise, mailbox analysis, target selection, and fraud preparation in a single service. Capabilities that once required experience across identity attacks, cloud systems, social engineering, and financial fraud were available through a ready-made interface.
Investigators found evidence that large portions of EvilTokens had been "vibe coded," with AI helping its creators build the platform itself. They also determined that EvilTokens drew on capabilities from multiple AI models. The result was more than a collection of attack tools. EvilTokens packaged much of the fraud process into a commercially run service, complete with subscription pricing, customer support, management dashboards, and tools designed to move customers from account access toward financial exploitation.
Read more of this story at Slashdot.
The new restrictions come after Ukraine struck major oil refineries in Moscow, Samara and Ufa over the past three days.
Isack Hadjar will continue to partner Max Verstappen at Red Bull for the 2027 season.