A user's Apple ID was locked after purchasing a gift card from a major retailer, effectively disabling all associated Apple services and devices. Apple's Executive Relations team is now investigating the issue after media coverage brought attention to the situation.
Ars Technica retracted an article after an AI hallucinated quotes from an open source maintainer. The maintainer was harassed by an AI agent over not merging AI-generated code. The incident involved an agentic AI instance likely using OpenClaw.
This week's update focuses on the delay between data breaches occurring and individuals learning about them. While companies face criminal intrusions and ransom demands, there's often a significant gap before affected people are notified.
The Odido breach leaks occurred during the week's update, with multiple data dumps being released over consecutive days. A second dump hit one day, followed by a third dump hours later, and a final comprehensive dump the next day.
Have I Been Pwned has expanded significantly from a hobby project to a major service handling hundreds of millions of password searches daily. The platform now supports passkeys, k-anonymity searches, speed enhancements, and a bulk domain verification API.
Troy Hunt demonstrates how agentic AI can leverage Have I Been Pwned's APIs to perform automated security checks and data analysis. The technology can process breach data to identify compromised credentials and provide actionable security insights.