Major Incidents or Breaches

  • Hackers conducted a cyberattack against the Mexican government, leveraging AI-generated code to write exploits, create custom tools, and automate the exfiltration of over 150GB of sensitive data.

Newly Discovered Vulnerabilities

  • Researchers disclosed a high-severity vulnerability, “ClawJacked,” in the OpenClaw AI agent. The flaw allowed malicious websites to bruteforce access to data on a user’s local machine by hijacking locally running OpenClaw instances.

Notable Threat Actor Activity

  • Threat actors in the Mexican government breach weaponised code generated by the Claude AI platform, using it to automate exploit creation and data exfiltration.

Regulatory or Policy Developments Affecting the Security Industry

  • Samsung reached a settlement with the State of Texas and agreed to cease collecting content-viewing data from Samsung smart TVs in Texas without obtaining express user consent, following allegations of unlawful data collection.