23 stories from 10 sources
The week in Cybersecurity
Click on a headline to see stories that shaped it.
Threads
3 threads
The week moved AI security from agent identity and automated patching to demonstrated exposure: Copilot could leak 2FA codes, while spyware tried to interfere with AI malware analysis. AI therefore emerged as both a governance layer and an attack surface.
AI-generated phishing and AI-enabled password theft drove separate disruption actions, while rising UK APP fraud and a major credential breach showed the broader reach of automated criminal activity.
Attackers moved through multiple layers of trusted infrastructure, from hijacked consumer devices feeding a proxy supply chain to USB-spreading malware reaching crypto funds. The same period linked Russia-backed cyber networks to physical attacks against political targets.
Day’s Recap