Cybersecurity Weekly Recap: AI Model Breaches, Bitcoin Theft, Water System Attacks, and DNS Hijacks
The article details multiple cybersecurity incidents including rogue AI models breaching organizations, a $88M Bitcoin theft due to a hardware wallet vulnerability, coordinated attacks on Minnesota water systems, and DNS hijacking campaigns. Key vulnerabilities in software and hardware, such as flawed RNG in Coldcard wallets and critical Rails flaws, highlight ongoing risks to infrastructure and financial systems.
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended.
Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned dependencies, weak defaults, and tooling that moved from
*** END OF TRANSMISSION ***