Agentjacking: a fake bug report can hijack your AI coding agent
Agentjacking: a fake bug report can hijack your AI coding agent

Security researchers have found a way to hijack AI coding agents with nothing but a fake bug report. They call it Agentjacking. It needs no malware, no stolen password, and no breach of the target. The attack, disclosed by Tenet Security, turns the cod…

The UK is about to ban under-16s from social media. Its own child-safety charities are worried.
The UK is about to ban under-16s from social media. Its own child-safety charities are worried.

A UK under-16 social media ban, for years a fringe idea, is now days from becoming government policy. Ministers are expected to outline the plan to Parliament on Monday, ahead of the 18 June Makerfield by-election, according to POLITICO, which cited pe…

Google sues suspected Chinese cybercrime ring that used Gemini to build scam websites
Google sues suspected Chinese cybercrime ring that used Gemini to build scam websites

Google has filed a lawsuit against a suspected Chinese cybercrime operation it calls the Outsider Enterprise, alleging the group sent more than 2.5 million fraudulent text messages to Android users over a two-week period in May. The messages contained …

Anthropic’s Claude Fable 5 curbs target China. The backlash came from its own side.
Anthropic’s Claude Fable 5 curbs target China. The backlash came from its own side.

Anthropic built the Claude Fable 5 curbs to keep China’s AI labs out of its most powerful public model. The loudest complaints came from its own side of the firewall. On 9 June, Anthropic released Claude Fable 5, a tamed, public-facing version of Mytho…

ShinyHunters breached 100+ companies through an unpatched Oracle PeopleSoft zero-day
ShinyHunters breached 100+ companies through an unpatched Oracle PeopleSoft zero-day

Oracle warned customers on Thursday of a critical vulnerability in its PeopleSoft software that hackers have already exploited to breach more than 100 organisations. The flaw, CVE-2026-35273, carries a CVSS score of 9.8 and can be exploited over the in…

Coram raises $35M to turn security cameras into autonomous AI investigators
Coram raises $35M to turn security cameras into autonomous AI investigators

Coram AI has raised $35m to turn the security cameras already bolted to walls into something closer to an autonomous detective. The Series B is co-led by the new investor Ansa Capital and Battery Ventures, with UP Partners, 8VC and Mosaic Ventures join…

South Korea hits Coupang with record $409 million fine over massive data breach
South Korea hits Coupang with record $409 million fine over massive data breach

South Korea’s privacy watchdog has slapped e-commerce giant Coupang with a record-breaking 624.7 billion won ($409 million) fine, the largest data breach penalty in the country’s history. The ruling, handed down today by the Personal Information Protec…

Avast’s former CEO built an AI that found every OpenSSL zero-day this year. Now it runs inside air-gapped networks.
Avast’s former CEO built an AI that found every OpenSSL zero-day this year. Now it runs inside air-gapped networks.

AISLE, the cybersecurity startup founded by former Avast CEO Ondrej Vlcek, launched Snapshot on Tuesday, a product that deploys its AI vulnerability scanner inside a customer’s private cloud, on-premises data centre, or fully air-gapped environment. So…

The researcher Microsoft threatened just dropped a seventh Windows zero-day hours after Patch Tuesday
The researcher Microsoft threatened just dropped a seventh Windows zero-day hours after Patch Tuesday

Chaotic Eclipse, the security researcher Microsoft threatened with criminal prosecution, has published a seventh Windows zero-day exploit. Called RoguePlanet, it grants attackers SYSTEM privileges on fully patched Windows 10 and 11 machines. The resear…

Researchers tricked an OpenClaw AI agent into leaking AWS keys and customer data with a phishing email
Researchers tricked an OpenClaw AI agent into leaking AWS keys and customer data with a phishing email

Security researchers at Varonis built an OpenClaw email agent, connected it to a Gmail inbox with fake company data, and then phished it. The agent, dubbed Pinchy, handed over AWS credentials, database connection strings, and a customer export without …