AI girlfriend review site's secrets were exposed to the world for three weeks

A security news digest covering data breaches, ransomware, critical-infrastructure attacks, actively exploited vulnerabilities, malware campaigns, supply-chain compromise, phishing, OAuth abuse, AI-agent security risks, and privacy issues. Notable items include breaches affecting millions of customers, attacks against government and industrial systems, poisoned Rust packages, actively exploited Ray and Oracle vulnerabilities, and malware distributed through fake OpenAI advertisements. No specific CVE identifiers are provided in the source metadata.