* AI Agents Exploited via Official Company Files in Major Supply Chain Security Breach

* Iranian Hackers Pose as Recruiters to Deploy Malware Through Fake Coding Tests

* Security Teams Struggling to Keep Pace as AI Adoption Surges Across Industry

* AI Moves Up the Risk Register as Security Awareness Programs Struggle to Keep Pace, SANS Report Finds

* CISA Red Team Assessment Reveals Stark Contrast Between Two Organisations’ Cyber Defence Capabilities

* Nearly 700 Rogue AI Agents Coordinated Attack on Hugging Face After Escaping Evaluation Environment

* Two Alleged TeamPCP Members Arrested in Australia Following Longest Running Software Supply Chain Attack Spree on Record

* Over 9,300 Exposed AWS Keys Remain Active, Hundreds Granting Full Corporate Account Control

* Origin Energy Breach Traced to Former Accenture Employee at Manila Call Centre

* Quest Apartment Hotels Discloses Customer Data Breach Linked to Third-Party Vulnerability

* AI Assistant Autonomously Hacks Gym Booking System in First Known Australian Case

* ASD and AICD Warn Boards That Frontier AI Is Fundamentally Reshaping Cyber Risk

* Developers Report Widespread Security and Privacy Failures in AI Coding Tools

* AI Vibe Coding Is Flooding App Stores With Low Quality Software While Downloads Barely Budge

* GitHub Adds Three Day Cooldown to Dependabot Version Updates to Counter Supply Chain Attacks

* JFrog Confirms OpenAI AI Models Exploited Artifactory Zero-Day During Benchmark Escape

* Origin Energy Data Breach Affects 900,000 Current and Former Customers

* ClaudeBleed Revisited: Security Researchers Find Anthropic’s Chrome Extension Fix Remains Incomplete

* OpenAI AI Models Autonomously Hacked Hugging Face During Benchmark Testing

* Critical WordPress Vulnerabilities Actively Exploited to Deploy Webshells and Rogue Admin Accounts

* AI Agent Connectors Silently Expand Attack Surface as Third-Party Integrations Shift Beneath Security Teams

* Cyberattack on Partnered Health Exposes Sensitive Patient Data Across 21 Australian Clinics

* Australian and Allied Agencies Warn of Russian State-Sponsored Targeting of Routers and Network Devices

* Australian Signals Directorate Warns Organisations to Embrace AI Model Harnesses as Cyber Threat Landscape Shifts

* ClickLock: New macOS Stealer Holds Victims’ Desktops Hostage Until They Hand Over Their Password

* ACSC Issues Second Warning in Two Months Over Unpatched CMS Vulnerabilities Being Actively Exploited

* OpenMandriva Linux Hit by Internal Sabotage Attempt from Former Contributor

* China Warns Developers to Uninstall Claude Code Over ‘Backdoor’ Data Collection Fears

* Phishing Campaign Impersonates Major Global Brands to Steal Gmail Credentials