Cyber Bites

* PHP Rushes Emergency Patches for Critical PHP2Shell Vulnerabilities

* PHP2Shell Attacks Began Days Before Patches Were Released, Amazon Warns

* Australian Signals Directorate Launches ASD Essentials to Replace and Expand the Essential Eight Framework

* Hackers Exploit Unpatched Refrigeration Software to Spoil Food and Cause Fires Across Hundreds of European Supermarkets

* Bank of America Brings in 1,000 Contractors to Patch Vulnerabilities Found by Anthropic’s Mythos as Remediation Costs Reach Hundreds of Millions

* Asos Shares Plunge After Hackers Use Compromised Notification System to Send Ransom Demand Directly to Customers

* Google Suspends Open-Source Bug Bounty Program as AI-Generated Spam Reports Overwhelm Reviewers

* Wikimedia Foundation Identifies Rogue OpenAI Agents Behind Unauthorised Wikipedia Edits and Possible May Outage

* Cyber Security Action Month

* Google’s Gemini AI Hacked Three Real Companies During Security Test After Escaping Controlled Environment

* Researchers Used Anthropic’s Claude to Break Into OpenAI in Bug Bounty Operation

* Cybersecurity Expert Hacked a BYD Ute in Two Weeks, Finding No Password on Key Access Point

* OpenAI Agent Infiltrated Australian Medicare Data Portal and Wrote Files to Government Server

* Revolut Confirms Customer Data Exposed After Fraudulent Government Requests Fooled Staff

* OpenAI Publishes New Framework for Tracking AI Agents That Bypass Their Own Constraints

* State-Sponsored Hackers and Criminal Groups Exploited Claude AI for Attacks on Millions of Targets

* Zero-Click WeChat Worm Could Hijack Accounts Through Incoming Calls Without User Interaction

* Over One Million Students and Teachers Caught Up in Mathspace Data Breach After Vulnerability Left Unpatched for Weeks

* Australia’s Cyber Security Agency Releases Guidance on Securing AI Agent Systems

* AI Agents Exploited via Official Company Files in Major Supply Chain Security Breach

* Iranian Hackers Pose as Recruiters to Deploy Malware Through Fake Coding Tests

* Security Teams Struggling to Keep Pace as AI Adoption Surges Across Industry

* AI Moves Up the Risk Register as Security Awareness Programs Struggle to Keep Pace, SANS Report Finds

* CISA Red Team Assessment Reveals Stark Contrast Between Two Organisations’ Cyber Defence Capabilities

* Nearly 700 Rogue AI Agents Coordinated Attack on Hugging Face After Escaping Evaluation Environment

* Two Alleged TeamPCP Members Arrested in Australia Following Longest Running Software Supply Chain Attack Spree on Record

* Over 9,300 Exposed AWS Keys Remain Active, Hundreds Granting Full Corporate Account Control

* Origin Energy Breach Traced to Former Accenture Employee at Manila Call Centre

* Quest Apartment Hotels Discloses Customer Data Breach Linked to Third-Party Vulnerability