Weekly tech news digest with less nerd factor.
A service provider cyberattack, a poisoned security update, active VPN exploits, AI-agent permission failures, freezer attacks, Amazon ad-auction allegations, and a practical NIST guide show what trusted access can really do.
Synology ransomware turns the backup appliance into the week’s most practical warning. Plus hospital downtime, exploited ecommerce software, AI permission failures, Toast’s lock-in problem, connected-car data, and private chats in bankruptcy.
Critical PHP flaws exposed a blind spot beneath WordPress, while AI agents, cloud outages, aging servers, and fraud showed where control really lives.
A cloud-backup incident exposes a bigger problem: the tools trusted to protect, administer, and restore a business need independent controls of their own.
Claude’s false police tip and Microsoft’s new Execution Containers point to the same lesson: AI agents need limits the model cannot rewrite. Plus FortiBleed, Veeam backup risk, connected-car privacy, outsourced patch failures, and AI’s growing infrastructure bill.
AI’s infrastructure buildout is measured in trillions, but useful work still has to pay the bill. Plus exploited FortiMail and Cisco flaws, a €95 million AI voice scam, 543,699 live GitHub credentials, a landmark AI copyright ruling, and a promising push to speed dementia diagnosis.
The OpenAI agent data leak made the week’s accountability problem concrete. Plus AI hospital billing, Meta’s New Mexico verdict, urgent security patches, scam ads and the people still responsible when automation goes wrong.