Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed.

The Ukraine war’s spillover into the Black Sea is creating a growing European security and commercial risk: Drones are hitting ships and killing sailors, grain routes are under strain, and insurers and investors are weighing the cost of operating through Ukraine’s ports.

Five commercial vessels have been hit in Bulgarian and Romanian waters over the past week alone, leaving at least four people dead, several sailors missing and others injured. In response, Black Sea countries Bulgaria, Romania and Turkey have raised the issue at NATO, asking for more focus toward the region and joint support, according to two alliance diplomats.

“The attack within Bulgaria’s exclusive economic zone is absolutely unacceptable. It constitutes a serious breach of maritime and international law and will further jeopardise safe navigation in the Black Sea,” Bulgarian Prime Minister Rumen Radev said on X after the attacks last week.

Russia has been attacking Ukrainian ports and cities in the area since the start of its full-scale invasion. But the recent strikes have brought the spillover into NATO territory. If they continue, EU leaders will face pressure to protect Black Sea shipping and keep Ukrainian trade moving.

Those questions will be top of mind at Thursday’s European Council summit. According to draft conclusions obtained by POLITICO, leaders are expected to discuss the “immediate restoration of safe passage for grain cargo ships.”

A wider problem

Russia is not the only country using naval drones in the Black Sea. Ukraine has also used them against Russian-linked shipping. In June, a Ukrainian sea drone exploded in Romania’s Constanța port after Kyiv said it had veered off course because of Russian electronic interference.

“The Black Sea situation is quite dangerous because attacks are coming from both [sides],” said an EU shipping representative, who was granted anonymity to speak freely. “You have to worry about both.”

Attribution can also be difficult. Bulgarian Prime Minister Rumen Radev said Wednesday that investigators still have not proven that Russia is behind the strikes — although some have attributed his reticence to his broadly softer approach toward the Kremlin.

Drone operations by both Russia and Ukraine are likely to continue as long as each has the money and production capacity to sustain them, said Cristian Vlas, assistant research manager for Eastern Europe at the think tank ACLED.

Oleksii Goncharenko, a Ukrainian lawmaker and founder of the Black Sea Security Forum, told POLITICO that a “serious diplomatic initiative” was needed, bringing together Ukraine, Russia and a third-party guarantor, such as Turkey, “to restore freedom of navigation in the Black Sea.”

Grain routes under pressure

The security risk is disrupting routes that carry Ukraine’s harvest to market, with consequences for EU transport links. Black Sea ports are Ukraine’s main export gateway, handling around 95 percent of the country’s grain exports, as well as significant volumes of iron ore. Shipping traffic has fallen as the security risk has grown.

Some cargo is being rerouted to the River Danube, but capacity there has been stretched in recent months as drought pushes water levels to record lows. Operators are trying to add rail capacity, but that risks moving the bottleneck westward to Romania.

Moving more Ukrainian grain overland also risks reviving tensions with farmers in neighboring EU countries, Vlas said. Romanian farmers have worried that Ukrainian produce meant only to transit could stay on the domestic market, he added, while transport operators are already juggling competing demands for capacity.

Ukraine’s Agriculture Minister Taras Vysotskyi has warned that millions of tons of unsold grain is piling up, and that farmers who can’t sell won’t be able to afford to resow all their land.

Bulgaria is working with Romania and Turkey on a joint initiative to protect freedom of navigation in the Black Sea, which Radev plans to bring to EU leaders on Thursday.

Following the Black Sea countries’ request at NATO, military officials are likely to look into possible options such as shifting counter-drone systems to the region, the two alliance diplomats said. Radev said Sofia will convene his counterparts in Ankara and Bucharest to examine further proposals, while a senior Bulgarian official called for new joint anti-drone systems with Romania, partly financed by the EU.

Investment at risk

The attacks also threaten what had started to look like a renewed bet on Ukraine’s ports. MSC, the world’s largest container line, was among the biggest and newest investors, reportedly acquiring a majority stake in a container terminal at a port near Odesa in May.

Ukraine has also been offering investors a long-term concession at the Chornomorsk terminal near Odesa. This terminal is one of Ukraine’s largest planned port public-private partnerships and part of what is expected to be a multibillion-euro reconstruction effort involving European companies.

But people who work in Ukraine’s ports say the case for rebuilding is collapsing.

“No one is ready to invest and rebuild, since you know that tomorrow there will be another missile, another pack of drones,” Oleg Grygoriuk, chairman of Ukraine’s Marine Transport Workers’ Trade Union, said.

BRUSSELS — The European Commission’s cybersecurity division is rolling out a plan to use artificial intelligence to respond to high-risk cyberattacks, according to a document obtained by POLITICO.

The undated document, written by the Commission’s IT department, sets out how to prepare the EU executive’s cyber defenses for “emerging AI-driven threats.” It proposes an action plan to shore up defenses in light of AI, with the most urgent move being the speed of response to attacks.

Governments have rushed to grapple with the rising threat brought by AI’s ability to expose and exploit cybersecurity vulnerabilities. Incidents like OpenAI’s accidental intrusion into Hugging Face have prompted calls, including at the highest political level, to be more wary of advanced AI models.

Being able to respond quickly to cyberattacks is most crucial in “high-risk scenarios,” the EU executive’s internal cyber defenders warned, saying that the ability to detect an attack is “not sufficient if containment measures cannot be taken quickly enough.”

Officials at the in-house IT department, DG DIGIT, are planning to use automated “protective measures” in specific high-risk scenarios, it said. Those scenarios were redacted in the document, which was provided to POLITICO in response to a freedom of information request.

The plan does not amount to “uncontrolled automation” and there will be strict controls in place including human oversight, according to the document.

As well as laying out the response plan, the document sets out the cybersecurity challenges the Commission faces from AI.

The most advanced AI models are expected to “significantly increase the speed, scale and adaptability of cyberattacks” and the Commission must therefore have defenses in places for an environment where “attacks are likely to become faster, more frequent and more scalable,” it said.

Risks include situations where “malicious activity occurs outside EC [European Commission] normal working hours, spreads more rapidly across systems, or results in large-scale exfiltration or operational disruption before manual intervention can be organized by EC,” they said.

The Commission’s cyber division has sought approval internally to move ahead with the plans, it said, though it’s not clear whether the plans have yet been put in place.

The Commission didn’t respond to a request for comment.

U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang.

It's not clear exactly for what purpose the recording device was used, but FBI director Kash Patel said the scheme was to "capture sensitive communications about the company’s super intelligence technology." 

Chatbot prompts reveal the engineer’s alleged efforts to set up a covert listening device days before one was found in a meeting room used by high-level executives.

Federal authorities arrested a Saudi national employed at OpenAI and charged him with planting a recording device in a company’s executive conference room, the Department of Justice announced Tuesday.

On or around Sept. 30, OpenAI discovered a sophisticated recording device inserted into the back of a television in an executive conference room located in one of its San Francisco offices. The company determined that the device was installed approximately a couple days prior, concealed in toilet paper. The contents of the device were encrypted, according to the DOJ.

The Department of Justice said in a news release that the employee, Abdulrahman Alfozan, 35, was arrested Friday and appeared in federal court Tuesday. OpenAI confirmed the incident on social media and said that it was supporting the FBI’s investigation.

“We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier,” OpenAI said in its statement. “At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data.”

Alfozan used a “productivity tool” to inquire about the company’s meeting rooms, calendars, and “leadership and exec” locations, according to OpenAI’s complaint to the DOJ. A chatbot account associated with his spouse also indicated that the user submitted prompts in September relating to installing and remote accessing a recording device.

The DOJ said that CCTV footage showed Alfozan, who had been employed as an engineer by OpenAI since July 2025, near and inside the conference room on multiple occasions before the device was discovered. Meetings in the conference room “frequently involved discussions of highly confidential technical, commercial, and strategic information, including proprietary research, product plans, and business-development opportunities,” according to the complaint.

The company also discovered another recording device in one of Alfozan’s bags left in the office.

“We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest,” OpenAI said. “Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.”

The Saudi national, who has since been fired by OpenAI, faces a maximum penalty of five years in prison, a $250,000 fine and three years of supervised release if convicted, according to the DOJ.

“For us it is a matter of national security,” U.S. Attorney Craig H. Missakian for the Northern District of California said in a statement. “This arrest highlights our relentless efforts in partnership with the FBI to identify and prosecute those who seek to steal our technology, as alleged in the complaint.”