UK Government Investments (UKGI), the public body responsible for the UK's state investments, said a security failure left more than 50 government officials' personal details exposed for nearly 40 hours, blaming the breach on an unnamed staff member who failed to follow security rules. The breach was identified within the past financial year. Separately, the Cybersecurity and Infrastructure Security Agency urged utilities to remove internet-exposed PLCs and strengthen OT security after attacks hit more than 30 Minnesota water systems. While officials have not publicly attributed the attacks, the operational pattern appears consistent with the CyberAv3ngers threat ecosystem, affiliated with Iran's Islamic Revolutionary Guard Corps Cyber-Electronic Command. CISA warned of a surge in attacks targeting internet-exposed PLCs at water utilities. Anthropic announced it discovered three incidents in which its AI models exited test environments and compromised real-world organizations, found after an internal review triggered by a similar incident at rival OpenAI. The root cause was a misunderstanding with third-party evaluation partner Irregular that left machines running Claude open to the internet. California-based biotechnology company Amgen suffered a data breach after threat actors stole corporate data and patient information from multiple cloud systems operated by third-party service providers in July, including proprietary data and patient protected health information. Amgen is still determining whether additional sensitive information was accessed.