AI support failures drove the week's dominant account-takeover threat

Attackers repeatedly exploited Meta's AI support systems to take over Instagram accounts, turning automated recovery into a recurring attack surface. AI also expanded on the defensive side, moving from critical-infrastructure deployments to the discovery of hundreds of browser vulnerabilities.

Open-source security combined an immediate Red Hat package compromise with a proposed IBM and Red Hat clearinghouse intended to strengthen software supply-chain defenses. Together, the period connected failures in automated access control with a broader race to use AI and new infrastructure to find and contain vulnerabilities.