Daily News, Aug 13th - more AI attacks

Today's episode covers critical risks including mass vulnerability scans spoofing legitimate AI bots, an ongoing data theft campaign (City-Forum) targeting Salesforce and ServiceNow portals, and the new Android threat WindRelay, which leverages the SpyNote RAT for real-time NFC credit card data theft. We also discuss the active exploitation of a critical Adobe Commerce and Magento vulnerability (CVE-2026-71362) and the Lazarus group's Operation Dream Job, exploiting a Windows zero-day against defense firms. On the AI and automation front, we look at the shift to tokenomics for AI agents, Walmart's purple teaming strategy, AI-driven hacker traps, and Qubes OS for advanced security.Key takeaways include the immediate need to audit Salesforce and ServiceNow portal permissions, prioritize patching the Adobe Commerce vulnerability, and improve internal security team communication through purple teaming principles.