ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

Security coverage this week describes multiple weaknesses that let attackers slip through “allowed” paths, including AI compute hijacking via misconfigured Ollama model servers used as the reasoning engine in offensive tooling. Apple’s Hide My Email service has a reported flaw that can reveal users’ real addresses, while research also details an attack chain against Claude Cowork on Windows that can lead to root-level execution in its sandbox and potential data exfiltration. Separately, CISA confirmed Microsoft Defender’s BlueHammer (CVE-2026-33825) was exploited in ransomware attacks, underscoring how quickly real-world impact can follow once patching lags.