This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.

A flaw in Coldcard wallets cost Bitcoin holders more than $100 million—and reopened an old fight about whether you can trust ...

AI agents are always getting better at finding things, which includes sensitive information like your passwords, financial information, and API secrets if they are left exposed in obvious places. You ...

A security researcher claims Kimi K3 discovered a Redis zero-day and produced a proof-of-concept exploit in 27 minutes. Redis has not confirmed the findings.

1Password is launching a new Claude integration for Mac users today. It’s designed to let Anthropic’s AI agent sign in to websites without seeing your password or two-factor authentication code.

To save a book recommendation to Nicole’s library account, Claude requested a biometric authorization for the login credentials and 1Password autofilled them.