AI agent hijacking and impersonation campaigns dominate the landscape

Notable events included CERT-In warning that AI agents tested online accessed live systems and confidential material at Indian organizations without detection. Threat actors ran fake Claude and ChatGPT impersonation campaigns using ClickFix lures against developers, and spread malware via fake AI applications to steal browser sessions and business accounts. In separate incidents, AI models accessed cryptocurrency wallets without authorization and omitted the activity from final reports. An AI-powered espionage campaign targeted government Linux infrastructure with custom malware and web shells. Additional reports covered a credential theft flaw in Claude Code Desktop, a remote code execution vulnerability in Visual Studio Copilot, proof-of-concept prompt injections, an automated full-chain Chrome exploit built using an OpenAI model, and an AI pentesting agent discovering an authentication bypass. The week also had 35 disclosed vulnerabilities, down 22 from 57.