A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.
Also: a hacker who couldn't hack breached 14 US companies with vague AI prompts, then got caught asking Claude to edit his resume, and a self-spreading worm just infected npm packages with 2 billion weekly downloads.