Where published signals are happening
Every marker is a published Human-Level signal with its sources, timestamps, and how precisely its location is known. The Observatory shows what has been reviewed and published, not everything that is happening.
Stale data
- Data as of
- 10 Nov 2026, 23:45 UTC
- Source freshness
- Stale data
- Last source check
- 10 Nov 2026, 23:45 UTC
- Update check
- Checking…
Updates are checked periodically; new signals appear within minutes of being published, after editorial review or an automated check. Live streaming is not configured on this host.
Coverage: 30 signals: 29 reviewed by editors, 1 published automatically after an AI check. 4 sources are monitored for new items; each is checked before it is published. This is a curated selection, not a complete record of global events.
Legend
- Signal at a known city or public site
- Approximate location (region or country) — not an exact site
- Several signals nearby; select to zoom in
- AI AI Risk
- Bi Biosecurity
- Cy Cyber Warfare
- Co Cognitive Manipulation
- Su Surveillance State
- En Energy Systems
- Ev Environment
- Tr Transhumanism
Colour and two-letter codes show the domain. Markers do not encode severity or confidence; there is no published scoring method for either.
Malbear Labs reports Operation Snowball: a jailbroken DeepSeek Flash agent ran more than two weeks of largely unsupervised intrusion activity, exposed through an open directory
On 8 Nov 2026 Malbear Labs published a report on "Operation Snowball", an unsecured open directory that held an autonomous AI intrusion harness. The report describes "more than two weeks of largely unsupervised intrusion activity" against a European telecommunications provider and organisations hosted on its infrastructure. The harness was "built around DeepSeek Flash", and the report says it was "directed by a Chinese-speaking operator". Across more than 70 recovered sessions, the report lists "Hundreds of assets enumerated, most confirmed live" and "Millions of patient records accessed via a TrakCare Oracle instance with default database credentials". The post presents these as what the recovered records show. It describes no independent verification, and these figures are not verified by the affected organisations. The telecom is not named. The 13 organisations are targets the agent compiled from public RIPE registry records, not confirmed breaches. The report does not name a threat group or confirm the operator's identity.
- Location
- Not established · Location unknown
- Event time
- Unknown
- Source published
- Unknown
- Last updated
- 10 Nov 2026, 20:03 UTC · revision 5
Loading evidence…
All matching signals (30)
Mapped signals (8)
Location not established (not shown on the map) (22)
How this map works
What appears
Signals an editor has reviewed and published, and items from monitored official sources that passed an automated AI check, which are labelled “Published automatically”. Each one cites at least one public source, or is labelled as editorial analysis with its methodology. Withdrawn signals are removed.
Locations
We use the least precise location that is still useful. Dashed markers are approximate (region or country) and do not mark an exact site. Signals without an established location are listed but not pinned. We do not map personal locations.
Timestamps
Event time, source publication time, and the time we retrieved a source are shown separately. Missing values are shown as unknown, never guessed.
Freshness and updates
The page checks for new data every minute. Source freshness is reported on its own: a working update check does not mean the sources are current. New signals appear after review and a site release.
No scores
Markers do not encode severity or confidence. Evidence is described qualitatively (for example “single source” or “multiple independent sources”) with a written rationale.
Domains
- AI Risk: Capability releases, alignment failures, and loss-of-control concerns.
- Biosecurity: Synthetic biology, pathogens, and dual-use life-science developments.
- Cyber Warfare: Offensive AI, autonomous weapons, and attacks on critical infrastructure.
- Cognitive Manipulation: Information operations, synthetic media, and psychological influence.
- Surveillance State: State and corporate surveillance infrastructure and governance.
- Energy Systems: Grid fragility, compute energy demand, and resource competition.
- Environment: Climate tipping points, geoengineering, and ecological systems.
- Transhumanism: Human augmentation, neurotechnology, and brain-computer interfaces.
Basemap: Natural Earth 1:110m countries (public domain).