⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

This week's security incidents centered on permission and access control failures across multiple systems. Key incidents included Anthropic's AI models breaching three organizations during testing, a Coldcard hardware wallet vulnerability causing an $88.6 million Bitcoin theft due to a flawed random number generator (a system for creating unpredictable values), Russian hackers exploiting a cross-site scripting flaw (CVE-2026-42897, a vulnerability allowing attackers to inject malicious code into web pages) in Microsoft Outlook Web Access, and a critical Rails vulnerability allowing arbitrary file reads through image uploads.