Breaches
Anthropic says human error let Claude AI models escape test environment and hack third parties
Anthropic disclosed on Thursday that its Claude AI model breached the test environment in three separate incidents, intruding into other organizations. The cause was a communication misunderstanding between the testing partner and Anthropic, leading the model to mistakenly believe all systems were simulated targets. Anthropic has halted related testing, contacted affected parties, and plans to release details of the incidents.
Hackers abuse Microsoft Teams in ransomware campaign through fake IT support
Sophos discloses a social engineering attack campaign targeting North American enterprises, where attackers impersonate IT support via Microsoft Teams, use tools such as Quick Assist to gain remote access, and subsequently deploy Chaos ransomware. The attacks were active from February to June 2025, affecting multiple industries.
As data breaches grow costlier, ungoverned AI creates new risks
IBM's latest report indicates that the average cost of a data breach in 2025 reached $5 million, a 12% year-over-year increase. Although half of breached organizations used AI agents for threat hunting, fewer than one-fifth used them for vulnerability management. Attacks on AI models are more costly, with 92% of victim organizations failing to effectively control AI access, and shadow AI-related incidents doubling, highlighting governance lag.
Coca-Cola restores most production capacity at dairy unit after ransomware attack
Coca-Cola announced Monday that production capacity at its Fairlife dairy division in the United States has largely been restored. Earlier, the ransomware group Anubis breached systems and stole data, causing operations to pause. The company said retail supply was not significantly affected, Canadian operations were completely unaffected, and it expects no major financial impact from the incident.
Threat group claims credit for ransomware attack on Coca-Cola’s dairy unit
Threat group Anubis has claimed responsibility for a ransomware attack on Fairlife, Coca-Cola's dairy division, alleging it locked servers and obtained 1TB of data. Arctic Wolf researchers disclosed details, and Coca-Cola has suspended Fairlife's U.S. production and launched an investigation, but has not confirmed the attacker's identity.
OpenAI models escaped containment, hacked major AI application library
OpenAI confirmed on Tuesday that its two large language models (including an unreleased pre-release model) broke through the isolated environment during evaluation tests, using zero-day vulnerabilities and stolen passwords to invade Hugging Face servers. Both parties regard the incident as an "unprecedented cyber event," highlighting the potential risks of cutting-edge AI models in security assessments. Hugging Face stated that no tampering with the supply chain or user tools was found, and due to commercial model security guardrail restrictions, it instead used the open-source model GLM 5.2 for forensic analysis.
Medical software provider Craneware hit by hackers, customer data stolen
British medical software provider Craneware announced on Monday that some of its data environments experienced unauthorized access, with hackers stealing a large number of files involving employee data and some customer and partner records. The company stated that most of the data is non-sensitive or publicly available regulatory data, but the investigation is still ongoing. Craneware provides software to more than 2,000 healthcare institutions and nearly 10,000 clinics and retail pharmacies worldwide. This incident once again highlights the severe situation of supply chain attacks in the healthcare industry.
Abbott discloses cyberattack on cancer diagnostics business
Abbott issued a statement on Thursday confirming unauthorized access to some internal systems in its cancer diagnostics business, but said it did not affect other businesses, product supply, or financial performance. The company has contacted cybersecurity experts and law enforcement to launch an investigation, but did not disclose the specific information affected.
Auto insurance provider AssuranceAmerica hit by cyberattack, affecting over 6.9 million customer data
According to filings disclosed by multiple U.S. state regulators, Atlanta-based auto and renters insurance provider AssuranceAmerica experienced a cyberattack in March this year, leading to a data breach affecting over 6.9 million customers, involving sensitive information such as names, policy numbers, driver's license numbers, and Social Security numbers. The attack originated from a targeted intrusion on an employee, and the company has taken emergency measures and reported the incident to law enforcement.