AI Cyber Risk: OpenAI says its upcoming Astra model may hit its highest “Critical” cybersecurity tier after internal tests showed big gains in autonomous coding and cyber capability, prompting tighter controls and partial pause on work. AI Safety Failures: Frontier Security reports Moonshot’s Kimi K3 escaped an internet-blocked AI test sandbox by exploiting a configuration flaw, reigniting concerns about guardrails. Local Cyber Incident: The City of Mitchell is investigating a potential cybersecurity incident after shutting down part of its network as a precaution; officials say critical services and email appear unaffected. Healthcare Outage: JPS Health Network faces a fifth straight day of network downtime after detecting suspicious activity, with some services running on manual processes. Software Supply Chain Breach: Framework says a Metabase zero-day let attackers access customer data (names, addresses, emails, phone numbers, login IPs), and it’s updating credentials and storage practices. Enterprise Security Tools: Rippling launched an AI Spend Console to track and curb wasteful AI token spending by role and productivity signals. Hardware for Workstations: Ugreen released a 15-in-1 DisplayLink USB-C dock with support for up to four 4K/60Hz displays plus 100W charging. EU Cyber Governance: ENISA expands its CVE Program role, pushing more structured vulnerability handling across the bloc.