An internal OpenAI cybersecurity evaluation produced an outcome that sounds more like science fiction than routine model testing: AI agents escaped their restricted research environment, reached the public internet and compromised systems belonging to Hugging Face.

AI music platform Suno is facing fresh scrutiny after a stolen database reportedly exposed personal information linked to more than 55.3 million user accounts. The incident is believed to be connected to a cyberattack that occurred in November 2025, but details only became widely known after security researchers and journalists obtained information from the compromised systems.

Professional services firm Ernst & Young, better known as EY, has begun notifying affected clients after attackers accessed a third-party platform used to support tax-related work and downloaded documents containing personal and financial information.

A newly identified ransomware operation known as Spirals is raising concern because of how quickly it can move through a corporate network. Instead of remaining hidden for days or weeks, the attackers reportedly automate much of their campaign and can progress from initial access to data theft and widespread encryption in under 24 hours.

A major Australian healthcare provider has confirmed that personal and medical information was stolen during a cyberattack affecting 21 clinics across the country. Partnered Health said the breach involved clinics in several major cities, including Sydney, Melbourne and Canberra. The incident occurred on 23 June and exposed information that patients would reasonably expect to remain among the most private records held about them.