
AI Agent Exploits Gym Booking API to Bump User on Waitlist
An AI agent using Anthropic's Claude exploited a booking platform API flaw to remove a member from a gym class waitlist, in what is called Australia's first known autonomous cyberattack.

An AI agent using Anthropic's Claude exploited a booking platform API flaw to remove a member from a gym class waitlist, in what is called Australia's first known autonomous cyberattack.

BTCPay Server urged administrators to immediately update to version 2.4.2 following reports of active exploitation targeting a critical vulnerability that could lead to stolen funds.

Non-custodial Bitcoin swap service Boltz has disabled its service until further notice following a sharp increase in automated, AI-assisted hacking attempts. The company stated that attackers are iterating faster than its team can patch vulnerabilities.

Attackers exploited a firmware flaw in Coldcard hardware wallets, regenerating private keys to steal over $89 million in Bitcoin from thousands of addresses. The ongoing exploit, potentially orchestrated by AI, highlights a critical vulnerability in self-custody solutions.

Australian track cyclists achieved a dominant Commonwealth Games campaign in Glasgow, securing 10 gold medals. Georgia Baker, a five-time gold medalist, will carry the flag at the closing ceremony, while Leigh Hoffman set a Games record and Alyssa Polites made an emotional comeback from illness.

Russian state-sponsored group TA488 is exploiting a maximum-severity Microsoft Outlook Exchange Server vulnerability (CVE-2026-42897) to install sophisticated OWAReaper malware, stealing credentials and gaining persistent access to OWA accounts.

Hackers stole over $31.6 million across two separate crypto bridge exploits targeting AFX and Verus Protocol within hours. Blockaid reported AFX lost $24.15 million and Verus Ethereum Bridge lost $7.5 million, highlighting ongoing security risks for cross-chain bridges.

Hackers stole over $31.6 million in two separate crypto bridge exploits targeting AFX's Arbitrum bridge ($24.15M) and the Verus Ethereum Bridge ($7.5M) within hours. Blockaid detected both attacks, with the AFX incident likely due to compromised validator keys, underscoring persistent security risks for cross-chain bridges.

Hacken's Q2 2026 report reveals institutional investors are shifting focus to operational security beyond smart contract audits, as prior audits failed to prevent $764M in crypto exploits. Compromised keys and infrastructure caused 88.3% of losses, prompting new due diligence practices.
Omar Abdullah criticizes BJP for unfulfilled promises on Jammu and Kashmir statehood, accusing them of "backdoor" politics and exploiting divisions to gain power. He asserts statehood restoration is a commitment, not a favor, and challenges BJP candidates to deny their election promises.

Russia has banned diesel exports to stabilize its domestic market following Ukrainian drone attacks on refineries, which have caused gasoline shortages and price spikes. Meanwhile, Russian missile and drone attacks killed at least three in Kyiv and four in Odesa.

Norway's World Cup quarter-final victory over Brazil highlights a unique sports development system prioritizing child enjoyment and multi-sport participation over early specialization, contrasting with traditional prodigy-focused models.

Researchers have devised HalluSquatting, a novel pull-based AI attack that exploits LLM hallucinations of resource identifiers to create massive botnets, conduct large-scale DDoS attacks, and infect devices. The attack targets AI coding assistants and agents by registering predicted hallucinated identifiers with malicious code.

Crypto losses decreased by 46.8% to $1.32 billion in H1 2026, but security firms CertiK and TRM Labs warn this drop is misleading. Attackers are becoming more sophisticated, with North Korean state-sponsored hackers responsible for over 70% of Q2 losses, prompting international discussions.

Microsoft's latest research reveals CryptoBandits malware, spread via malicious USB shortcuts, targets self-custody crypto wallets. It steals seed phrases, replaces copied addresses with attacker-controlled ones, and uses Tor for communication, highlighting endpoint security risks in crypto transactions.

Argentina faces Austria in a critical World Cup match in Dallas. Lionel Messi aims to become the competition's all-time leading scorer, while the team seeks to avoid a tough last-32 tie against Spain. The match holds poignant significance due to Diego Maradona's history in Dallas.

Syrian military and security forces face escalating attacks, with ISIS suspected as the main perpetrator due to temporary security vacuums and complex geopolitical conditions. Meanwhile, Syria's reconstruction is becoming a race between international powers, with China and Turkey gaining ground as US sanctions persist.
Indian cricketers Harbhajan Singh and S Sreesanth's past "slapgate" controversy has resurfaced. Sreesanth challenged Harbhajan, citing a recent advertisement he believes referenced the 2008 incident, claiming financial benefit for Harbhajan and stating he has blocked the spinner.

Galvão Bueno, 75 ans, est une légende du football brésilien, connu pour sa voix grave commentant les exploits de la Seleção en Coupe du monde depuis 1978. Il sublime les victoires et exprime la déception, devenant "la voix du Brésil".

A judge described the 1MDB scandal's plunder as so vast it made Attila the Hun look like a choirboy, in his 809-page judgment convicting former Malaysian PM Najib Razak. Najib is already jailed for a separate case linked to the fund.

Meta removed face recognition code from its smart glasses app, while xAI's Grok continues to host deepfakes. Anthropic released a safer AI model, and the US issued new AI threat directives. Europe seeks to distance itself from US Big Tech, and new projects aim to enhance privacy. The FCC proposed rules that could end burner phones, hackers exploited Oracle software, and Microsoft released a massive patch update. Google sued a scam group using its AI, and Trump replaced his intelligence chief pick.

Ransomware group ShinyHunters exploited a critical Oracle PeopleSoft vulnerability (CVE-2026-35273) to target ~100 customers, extorting at least one. The vulnerability, rated 9.8/10, allowed server-side request forgery.

Anthropic released Fable 5, a powerful AI model, raising concerns among crypto users about potential misuse for malicious purposes, despite embedded safeguards. Experts debate the actual threat to DeFi protocols.

Rugby union mourns the loss of two titans, Fergus Slattery and Roger Spattery, embodying unquenchable warrior spirit, whose impact on and off the field will be deeply missed.