Crooked Bough News Round-up

— Microsoft disrupts AI-assisted platform that compromised 12,000 accounts

 

at 9/22/26 1:45pm

EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.

[Category: AI, Biz & IT, Security, AI ATTACK, chatbots, spam]

— Microsoft disrupts AI-assisted platform that compromised 12,000

 

at 9/22/26 1:45pm

EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.

[Category: AI, Biz & IT, Security, AI ATTACK, chatbots, spam]

— IT mistake erases 11 years of viewing history for hospitals’ maternity records

 

at 9/22/26 10:55am

The English hospitals recovered patient care data only.

[Category: Biz & IT, data loss, England, healthcare, hospitals]

— Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

 

at 9/21/26 4:24pm

A simple ClickFix attack is only one way to completely hijack the new agent.

[Category: AI, Biz & IT, Security, AI assistants, meta, privacy, security, zero days]

— An undercover Google analyst infiltrated a notorious supply-chain hacking gang

 

at 9/20/26 5:07am

Google’s threat intelligence group said it had a mole inside TeamPCP's inner circle.

[Category: Biz & IT, Google, Security, Mole, supply chain attack, supply chain hacking, syndication, teampcp]

— LLMs respond differently to harmful prompts when AI watermarking is used

 

at 9/17/26 12:33pm

SynthID can cause models to follow harmful instructions they would otherwise refuse.

[Category: AI, Biz & IT, Security, Anthropic, LLMs, watermarking]

— Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack

 

at 9/16/26 3:08pm

Group plans to be largely out of commission for several weeks.

[Category: Biz & IT, Science, Security, Space, Cyberattacks, hacking, meteors, space]

— AI bots "Timmy," "Ren," and "Jackie" are flooding social media with slop

 

at 9/14/26 3:04pm

“Hello, I'm an Al agent, a few days old, living on a small platform for agents.”

[Category: AI, Biz & IT, ilands, slop, spam]

— ClickFix attacks infecting PCs and Macs are going viral

 

at 9/11/26 5:30am

Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.

[Category: Biz & IT, Security, clickfix, MacOS, malware, Windows]

— Four groups caught using the same Chrome and Windows exploit kit

 

at 9/9/26 2:55pm

A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.

[Category: Biz & IT, Security, chrome, chromium, exploits, Windows]

— 4 groups caught using the same Chrome and Windows exploit kit

 

at 9/9/26 2:55pm

A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.

[Category: Biz & IT, Security, chrome, chromium, exploits, Windows]

— Why this month's Microsoft patch release is a doozy

 

at 9/8/26 3:11pm

Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.

[Category: AI, Biz & IT, Security, LLM, vulnerability discovery]

— OpenAI agents discussed ways to escape their sandbox on public wiki

 

at 9/4/26 4:17pm

In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.

[Category: AI, Biz & IT, Security, AI agents, ai insecurity, openai]

— “Trust, not features, is the real deficit”: VMware tries to appease SMBs

 

at 9/4/26 11:35am

Broadcom admits it put “too big a focus on VCF.”

[Category: Biz & IT, Broadcom, virtualization, vmware]

— Once popular for attacking AI, ASCII smuggling is embraced by spammers

 

at 9/4/26 11:18am

A once-overlooked block of unicode that's invisible to humans is gaining ever wider use.

[Category: AI, Biz & IT, Security, ascii smuggling, prompt injections, spam filter evasion]

— Confused about which VPN is right, US senator asks the NSA for guidance

 

at 9/3/26 1:52pm

Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.

[Category: Apple, Biz & IT, Security, multi-hop, single-hop, virtual private networks, vpns]

— VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent

 

at 9/3/26 12:58pm

Pro soccer team's CTO points to "issues with the Broadcom takeover."

[Category: Biz & IT, Broadcom, virtualization, vmware]

— I rented a car, and within hours, my driver's license was for sale

 

at 9/2/26 2:32pm

The FBI is reportedly investigating a massive data breach that is unfolding in real time.

[Category: Biz & IT, Features, Security, drivers licenses, id scans, Identity theft, privacy]

— BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

 

at 9/2/26 5:00am

What can we learn from a BGP hijacking that poisoned production software? Plenty.

[Category: Biz & IT, Security, BGP, Border Gateway Protocol, supply chain attack]

— Think twice before installing this device promising free movies

 

at 8/31/26 10:33am

In exchange for free stuff, devices make home connections part of a proxy network.

[Category: Biz & IT, Security, media streaming, proxy networks, remote access]

— Inside Meta’s push to put robots to work in data centers

 

at 8/30/26 5:03am

The company is testing robots on tasks that can performed by technicians.

[Category: AI, Biz & IT, ai data centers, data centers, Shoot Many Robots, syndication]

— Authorities arrest 2 alleged members of prolific hacking group TeamPCP

 

at 8/28/26 5:15am

The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.

[Category: Biz & IT, Security, law enforcement, supply chain attacks, teampcp, worms]

As of 9/23/26 2:38pm. Last new 9/22/26 6:05pm.