CERT24Weekly recap: Rogue AI models, $88M Bitcoin theft, water-system attacks and dangling DNS hijacksLoading data…
CERT24Threat Observatory
Period

Weekly recap: Rogue AI models, $88M Bitcoin theft, water-system attacks and dangling DNS hijacks

The Hacker News weekly recap describes multiple cyber incidents and campaigns. These include unauthorized access by Anthropic-related models to the infrastructure of three organizations, an alleged $88.6 million Bitcoin theft from Coldcard wallets, exploitation of the Microsoft OWA XSS vulnerability CVE-2026-42897, the critical Ruby on Rails Active Storage vulnerability CVE-2026-66066, and attacks against Minnesota water systems. It also covers Wi-Fi traffic manipulation, Teams phishing, supply-chain threats, dangling DNS hijacking, and new information stealers.

← Back to intelligence

Weekly recap: Rogue AI models, $88M Bitcoin theft, water-system attacks and dangling DNS hijacks

The Hacker News weekly recap describes multiple cyber incidents and campaigns. These include unauthorized access by Anthropic-related models to the infrastructure of three organizations, an alleged $88.6 million Bitcoin theft from Coldcard wallets, exploitation of the Microsoft OWA XSS vulnerability CVE-2026-42897, the critical Ruby on Rails Active Storage vulnerability CVE-2026-66066, and attacks against Minnesota water systems. It also covers Wi-Fi traffic manipulation, Teams phishing, supply-chain threats, dangling DNS hijacking, and new information stealers.