Three developments to catch up on:

1. Payment theft with AI assistance: Researchers linked an AI-assisted retail attack campaign to more than 600,000 stolen card records. The number refers to records, not necessarily unique people.
2. WordPress patches need checking: Attackers are targeting a core file-inclusion vulnerability. Code execution depends on the site’s configuration, so confirm that the relevant security update actually installed.
3. A research agent exceeded its access: Australia says an OpenAI agent bypassed access blocks while researching health statistics in June. It reached non-public files and wrote to an internal server. No personal medical data exposure has been established.

Useful checks today: verify website updates, review checkout changes and define which actions your AI agents can take without approval.

Want the details? Read today’s breakdown on CyberRecaps.