Industry News

AI is making phishing attacks faster and harder to stop, with attackers using AI to quickly create and rotate phishing infrastructure (fake websites designed to steal login information) across multiple channels like email, social media, and search ads, while employees simultaneously adopt unvetted AI tools that expose sensitive data. Traditional security defenses that rely on blocklists and IOC feeds (indicators of compromise, like flagged domain names and IP addresses) are becoming ineffective because phishing pages now appear and disappear in hours, making them essentially zero-day attacks (previously unseen threats) that blocklists cannot catch in time. The article argues that browsers are now the critical security battleground where both attacker delivery and account compromise occur.

Gemini Spark is Google's new agentic AI (an AI system that can take independent actions to complete tasks) that goes beyond typical chatbots in handling complex requests like trip planning. Unlike previous AI tools that only handle generic travel suggestions, Spark appears to deliver more detailed and personalized results by actively searching multiple sources and creating comprehensive itineraries.

Over 30 Red Hat npm packages (pre-built code libraries) were infected with malware called Miasma, which automatically runs during package installation to steal developer credentials, authentication tokens, and cloud access information. This is a supply chain attack (an attack targeting software dependencies that many organizations trust) using a self-propagating worm based on the Shai-Hulud malware family. The malware was designed to spread further by stealing publishing credentials that could give attackers access to additional repositories and developer accounts.

This article is a business news roundup covering multiple topics including geopolitical negotiations, stock market movements, and corporate announcements. The only AI-related item is that Anthropic, an AI startup, has confidentially filed paperwork with regulators to prepare for going public (an IPO, or initial public offering, where a private company sells shares to the public), ahead of its rival OpenAI which is also preparing a similar filing.

Travelers Insurance deployed an AI Claim Assistant powered by OpenAI's Realtime API (a system that lets AI have natural voice conversations in real time) to help customers file auto insurance claims after accidents. The assistant guides customers through the claims process 24/7 without wait times, and 85-90% of customers now complete their claims entirely through the AI, freeing human staff to handle more complex cases.

This article describes how small business owners can use AI tools, like Notion AI and Rain, to automate routine administrative tasks such as note-taking, scheduling, invoicing, and inventory management. For example, a tutor uses Notion AI to summarize client meetings and organize teaching materials, while a craft shop uses Rain to generate product descriptions and pricing, reducing listing time by 60 to 80 percent. The article emphasizes that AI works best for repetitive, less creative tasks, though business owners should carefully evaluate costs and whether the tool integrates well with their existing workflow before adopting it.

Major tech companies like Google and Microsoft are competing heavily in the AI coding assistant market, where Anthropic's Claude Code has taken an early lead. The market is projected to grow from $9.3 billion this year to roughly $30 billion by 2031, making it critical for these companies to compete not just for revenue, but also to get developers using their cloud services and training data to improve their AI models.

Anthropic is allowing the European Union's security agency (ENISA, the European Network and Information Security Agency) to access Mythos AI, a tool for testing AI security vulnerabilities. This partnership comes from cooperation between the European Commission and Anthropic as part of Project Glasswing.

Google has released Gemini Spark, an AI agent (a program that can independently complete multi-step tasks) that can work on tasks in the background on your behalf. While the agent performs well in demonstrations, the article raises concerns about its financial cost and potential privacy risks, questioning whether these tradeoffs are worthwhile.

Oracle released its first monthly Critical Security Patch Update (CSPU, a new faster patch cycle for urgent fixes that can't wait for quarterly updates) addressing 35 vulnerabilities, including 11 rated critical and several with publicly available exploit code. The most dangerous flaw is CVE-2026-46840 with a perfect CVSS score (a 0-10 severity rating) of 10, which allows unauthenticated attackers to take over Oracle REST Data Services (a gateway that exposes databases through APIs) via HTTPS.

OpenAI has published a statement on its AI policy approach, emphasizing that decisions about governing and deploying AI should involve governments, researchers, workers, civil society, and the public rather than any single company. The company states it has not created employee-funded PACs (political action committees, groups that collect money to influence elections), made donations to super PACs, or funded political candidates, though employees are free to engage in politics personally, and OpenAI commits to transparency if this approach changes.