This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.

A bug in the tech giant's website the logo of US marketing automation company Klaviyo Inc. is seen displayed on a smartphone in front of an abstract background on a computer screen..

Outlook CSS techniques can spoof Microsoft sign-in and capture passwords, while Gmail image-set() can trigger external ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

Zenity has disclosed the details of two AI browser hacking techniques targeting Claude in Chrome and ChatGPT Atlas.

CISA warns that three vulnerabilities in IBM Langflow OSS, N-able N-central, and Apache Tomcat have been exploited in the ...

The creator of Walmart's internal vibe-coding tool is leaving for AI start-up Pydantic. Code Puppy lets workers code their ...

A one-line entry in the Claude Code v2.1.200 changelog, released July 3, 2026, changed something fundamental about how the tool behaves the moment a developer installs or updates it. Anthropic changed ...

Recently, my father called me in a panic. There were just a few minutes until Netflix would start streaming a live MMA event, and he couldn’t get into my account. For a while, he had accessed Netflix ...

Rockstar Games has announced that physical copies of Grand Theft Auto 6 won't come on disc. They will "contain a download code inside the box," according to the developer's announcement of pre-order ...

Microsoft shipped VS Code 1.124 on June 10, 2026, with a change that will affect every developer who updates the editor without reading the release notes: Copilot Autopilot — the permission level that ...

The Centre for Cybersecurity Belgium (CCB), the country's national authority for cybersecurity, warned on Friday that threat actors are now exploiting a recently patched critical Windows Netlogon ...