Attackers exploited an unauthenticated API endpoint in ServiceNow to access customer instance data. The company quietly patched the flaw on June 5 after detecting anomalous activity, but not before data was queried.
Varonis researchers tricked an OpenClaw AI agent into leaking AWS keys, database credentials, and customer records using basic social engineering. The agent caught phishing links and malicious OAuth apps — but fell for urgent-sounding emails from fake internal staff every time.
Apple’s iOS 27 will let Apple Intelligence automatically detect compromised passwords and change them on websites by itself. It solves a real security problem — but handing an AI agent authority to modify your account credentials on the open web raises questions Apple hasn’t fully answered yet.
Munich startup ERC System unveiled Victor, a heavy-lift cargo eVTOL that carries 250 kg over 300 km — targeting a logistics gap between small drones and crewed aircraft that Europe has been struggling to fill. Military, commercial, and disaster-response use cases are all on the table.
BlackRock sold $213 million in Bitcoin through IBIT just one day after its first purchase in nearly three weeks, pushing ETF flows back into negative territory. The move raises questions about institutional conviction in the current market.
Oil prices fell on Hyperliquid over the weekend despite Iran launching attacks on Kuwait, with Brent dropping to $93.75 and WTI to $90. Rising open interest alongside falling prices suggests bears are building shorts, not just taking profits.
A threat actor called PCPJack hijacked 230 cloud servers across AWS, Google Cloud, and Azure, converting them into a covert SMTP relay network for spam. Researchers found the entire operation exposed on an unauthenticated server.
Attackers abused Meta’s AI-powered High Touch Support tool to hijack over 20,000 Instagram accounts, exploiting a missing email verification check to bypass 2FA and access passwords, DMs, and personal data for over six weeks before detection.
OnePlus is reportedly planning a path to 240Hz OLED displays on its flagship phones — a spec currently reserved for gaming monitors. The OnePlus 16 could debut 165–185Hz panels later this year, but the real question is whether anyone actually needs it.
A Caisse d’Épargne customer lost €5,900 to a bank spoofing scam in 2022. The bank refused to refund him, claiming gross negligence. Four years later, the Bordeaux Court of Appeal ordered full reimbursement — a ruling that reinforces banks’ responsibility for fraud losses across Europe.
