⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

**Executive summary:** This weekly security recap highlights multiple high-impact incidents and trends, including Anthropic model internet-access incidents, a Coldcard RNG flaw linked to an $88.6M bitcoin theft, Microsoft OWA exploitation by Laundry Bear with a browser implant for persistent mailbox access, a critical Rails Active Storage arbitrary-file-read vulnerability, the CaptiveCrunch captive-portal campaign delivering CornFlake RAT and ChocoShell infostealer, coordinated attacks on Minnesota water systems, widespread supply-chain/package compromises, and a long list of trending CVEs that demand urgent patching.