Security researchers in Austria this week disclosed a new no‑interaction web attack called FROST (fingerprinting remotely using OPFS‑based SSD timing) that can let a malicious webpage infer which other sites and applications a visitor has open. The technique abuses the browser feature Origin Private File System (OPFS) to create a very large file on a visitor’s solid‑state drive and then measures tiny SSD I/O latency variations caused by other activity. Traces are fed to a pretrained convolutional neural network to classify open websites and running apps. In lab tests the team reported about 88.9% accuracy for website identification and roughly 95.8% for detecting applications on an Apple M2 Mac; the SSD timing primitive also worked on Linux though the full attack was not executed there, and Windows was not tested. FROST runs entirely in the browser and can profile activity across different browsers on the same machine. Researchers say the attack is detectable (it requires multi‑gigabyte OPFS files) and only works while the malicious tab remains open. The paper is scheduled for presentation at DIMVA in July 2026 and browser vendors have been notified; there are no confirmed in‑the‑wild incidents.

Researchers at the University of Toronto, in collaboration with the Vector Institute and the University of Cambridge, have published a proof‑of‑concept showing an AI-driven computer worm that adapts its tactics as it spreads. The prototype used an open‑weight large language model running on compromised machines to reason about each target, read public vulnerability advisories in real time and generate tailored exploits. Tests were conducted in an isolated 33‑host network (Linux, Windows and IoT devices) over 15 seven‑day runs; on average the agent identified about 31 vulnerabilities, achieved elevated access on roughly 23 hosts and propagated to about 20 hosts. The authors redacted operational details and disclosed findings to Canadian authorities before release. The worm hijacks infected devices’ compute (including GPUs) to run the model and can repurpose credentials and workarounds it finds, making single‑patch fixes insufficient. The team and outside experts warn the threat could grow as devices gain local inference capability and language models improve, and they urge coordinated responses including accelerated patching, AI‑assisted testing and cross‑sector collaboration.

Security researchers at McAfee Labs uncovered a large-scale Malware-as-a-Service operation dubbed “WeedHack” that has infected more than 116,000 systems since January 2026, adding roughly 2,000–3,000 new infections per day. The campaign relies on malicious JAR files (3,820 identified) and over 240 distribution URLs, spreading via YouTube videos, SEO-poisoned sites, Discord communities and file-hosting links that impersonate popular Minecraft mods and clients. WeedHack’s free tier functions as a comprehensive infostealer targeting Minecraft session IDs, credentials from 36 browsers, 56 browser-based crypto wallets and multiple platforms (Discord, Steam, Telegram). Paid tiers (about $4.99/month) unlock remote-access features including webcam capture, keylogging, screen and keyboard control, and file exfiltration. The platform uses an enterprise-style dashboard with leaderboards and a Telegram channel of ~850 members; McAfee says many customers appear to be teenagers who have used the tool for harassment and blackmail. Technical defenses include EtherHiding (C2 resolution via Ethereum), Windows Defender exclusion manipulation and persistence mechanisms that complicate removal. Reported infections are concentrated in the United States, Germany, India, the UK and other countries. McAfee urges users to avoid unofficial mods, enable MFA and run updated antivirus scans.

Anthropic announced on June 2–3, 2026 that it is widening access to its powerful cybersecurity model Claude Mythos via Project Glasswing, increasing partners from roughly 50 to about 200 organisations. Access is limited to organisations that meet security requirements and includes government bodies, utilities and vendors across more than 15 countries. Anthropic says partners in the expanded cohort operate in sectors such as power, water, healthcare, communications and hardware, and that previous Glasswing testing has surfaced more than 10,000 high- or critical-severity software flaws. The company estimates a successful attack on many partner codebases could affect more than 100 million people. Anthropic has withheld Mythos from general release, saying its dual-use capabilities pose misuse risks, and warned rival firms could produce comparable models within six to 12 months. The expansion follows Anthropic’s confidential IPO filing and comes amid industry and government talks about disclosures, guardrails and responsibility for patching vulnerabilities fast enough to stay ahead of attackers.

Google this week began rolling out a new fake call detection feature for Android designed to block AI-powered impersonation scams. Announced June 2–3, 2026, the protection will arrive globally this month in Phone by Google on devices running Android 12 and later, starting with Pixel phones. The feature works by sending an end-to-end encrypted RCS ‘silent confirmation’ from the caller’s device to the recipient’s handset; if that hardware-bound signal is missing, the recipient’s phone will ping the contact’s device and display a warning advising the user to hang up. The check runs by default in the background and does not analyse call audio. Google built the system on the Rich Communication Services standard so other apps and manufacturers can adopt it. The rollout is part of a wider June Android update that also includes Google Photos’ virtual wardrobe, Circle to Search improvements and expanded cross-platform file sharing. Google and several security outlets cited rising losses from AI voice-cloning impersonation scams as the impetus for the feature.

Atlas Menu, a paid cheat and mod-menu service for Grand Theft Auto V (and reportedly Counter-Strike 2), was breached in May 2026 and publicly reported in early June. Data-breach tracker Have I Been Pwned added the leak after an attacker posted an archive to GitHub, with the exposed records numbering roughly 63,900–64,000 accounts. Stolen fields include email addresses, usernames, IP addresses, support tickets and passwords stored as bcrypt hashes. The attacker said the compromise was retaliation against an alleged scammer. Atlas Menu’s website and storefront were offline at the time of reporting and the service has not issued a public statement. The incident highlights recurring security issues around third‑party gaming cheat operators, whose infrastructure and customer data often lack accountability and professional safeguards.