Threat

CrowdStrike’s actor-side records link AI tools to one South Korean financial campaign, but they do not establish a wider AI-driven wave or a connection to Japan.

ASOS says names and contact details may have been accessed after a rogue notification, while Snowflake compromise and data-theft claims remain unverified.

A contractor was removed after the FBI linked the FBIJobs.gov breach to an unapplied security patch, while key claims about the platform and scope remain source-attributed.

South Korea has expanded its response to financial-sector attacks, but reported ARTEX artefacts do not establish that an AI tool carried out an intrusion.

The incident used a private company’s authorised CPR connection, while investigators have yet to establish how much data was copied or whether it was misused.

Investigators reportedly found temporary access to VL Prosperity’s propulsion technology, but the intruders’ capabilities, access route and identity remain unknown.

Fortinet reported active exploitation of CVE-2026-104286. Affected FortiMail operators need temporary controls and retrospective checks while verifying the availability of planned fixes.

Microsoft’s reported surge in Teams voice phishing points to identity abuse, but missing counts and methodology limit conclusions about victims, AI and global prevalence.

A fifth Australian agency has not been confirmed in the available record, which documents four bodies and materially different forms of interaction.

OpenAI’s 10 September notice to Services Australia reported no credential access. Its 28 September account said the internal model retrieved credentials.