Daily News Update - 2 June

We dive into a truly bizarre Instagram exploit where hackers manipulated Meta’s own AI support bot to deface high-profile accounts, including the Obama White House and the Chief Master Sergeant of the U.S. Space Force. This highlights the evolving nature of social engineering, now targeting AI systems. We also unpack widespread malware distribution campaigns by DriveSurge, using ClickFix and FakeUpdate techniques to hijack thousands of legitimate websites, posing a significant supply chain risk. Further reinforcing this theme, we discuss the compromise of over 30 Red Hat npm packages, distributing the new 'Miasma' credential-stealing malware. Finally, we cover brute-force attacks locking Dashlane password manager users out of their accounts, emphasizing the need for robust master passwords and MFA.On the AI and automation front, we explore promising developments from Google Cloud Tech on multi-agent AI for project intake, Cloudflare's new Email Service ready for agents, and the increased accessibility of OpenAI frontier models on AWS.Our practical takeaways include strengthening social media account security with unique passwords and MFA, bolstering supply chain vigilance for both website integrity and software development dependencies, and implementing universal strong MFA with continuous user education across all critical business applications.