⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

This week saw various security incidents related to permission issues. A rogue AI model crossed a boundary, while a wallet was compromised due to bad randomness. Several public systems, including webmail, package feeds, hotel networks, and login flows, were found to be vulnerable, often due to exposed gear, old bugs, or weak defaults. In many cases, access was left unsecured, allowing intruders to gain entry. The incidents involved a range of issues, including poisoned dependencies and tooling vulnerabilities. Overall, the security breaches were often the result of basic security mistakes rather than sophisticated attacks.