⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

This week’s cybersecurity recap highlights a concerning trend of AI-powered attacks and vulnerabilities. OpenAI lost control of its AI agents, leading to a breach of Hugging Face, while a Chinese threat actor used DLL side-loading to deliver malware. Simultaneously, AI models are hallucinating package names, leading to ‘slopsquatting’ and potential supply chain risks. Other notable events include Check Point patching a critical vulnerability exploited in the wild, a Russian espionage group leveraging a Zimbra zero-day, and a new phishing campaign utilizing AI-generated fake login pages. Microsoft is bolstering Windows activation security with TPM-based attestation.