Apple’s iOS 27 will let Apple Intelligence automatically detect compromised passwords and change them on websites by itself. It solves a real security problem — but handing an AI agent authority to modify your account credentials on the open web raises questions Apple hasn’t fully answered yet.
Munich startup ERC System unveiled Victor, a heavy-lift cargo eVTOL that carries 250 kg over 300 km — targeting a logistics gap between small drones and crewed aircraft that Europe has been struggling to fill. Military, commercial, and disaster-response use cases are all on the table.
BlackRock sold $213 million in Bitcoin through IBIT just one day after its first purchase in nearly three weeks, pushing ETF flows back into negative territory. The move raises questions about institutional conviction in the current market.
Oil prices fell on Hyperliquid over the weekend despite Iran launching attacks on Kuwait, with Brent dropping to $93.75 and WTI to $90. Rising open interest alongside falling prices suggests bears are building shorts, not just taking profits.
A threat actor called PCPJack hijacked 230 cloud servers across AWS, Google Cloud, and Azure, converting them into a covert SMTP relay network for spam. Researchers found the entire operation exposed on an unauthenticated server.
Attackers abused Meta’s AI-powered High Touch Support tool to hijack over 20,000 Instagram accounts, exploiting a missing email verification check to bypass 2FA and access passwords, DMs, and personal data for over six weeks before detection.
OnePlus is reportedly planning a path to 240Hz OLED displays on its flagship phones — a spec currently reserved for gaming monitors. The OnePlus 16 could debut 165–185Hz panels later this year, but the real question is whether anyone actually needs it.
A Caisse d’Épargne customer lost €5,900 to a bank spoofing scam in 2022. The bank refused to refund him, claiming gross negligence. Four years later, the Bordeaux Court of Appeal ordered full reimbursement — a ruling that reinforces banks’ responsibility for fraud losses across Europe.
Hackers are abusing Google’s DoubleClick domain to deliver a .NET-based RAT through targeted phishing emails. The attack chain uses dynamically personalized landing pages and process hollowing to evade detection, making it harder for security tools to flag malicious traffic.
Microsoft released an investigative playbook for security teams to efficiently analyze incidents involving Copilot and Azure AI. It provides a structured, telemetry-driven method to determine what AI actions occurred, what data was involved, and whether it was a threat.
