Security news weekly round-up - 17th July 2026

Short summary

A weekly cybersecurity round-up covering five stories: defenders using prompt injections to disable AI hacking agents, a new macOS password-stealing malware called ClickLock, TELEPUZ malware spreading via ClickFix attacks, Spirals ransomware written in Rust, and the rise of AI-powered voice phishing. Each item summarizes the threat and its implications for security teams.

• •Defenders are embedding prompt injections alongside secrets to shut down AI hacking agents
• •ClickLock macOS stealer targets users across 33 countries, harvesting credentials and crypto wallets
• •Spirals ransomware encrypts systems in under 24 hours using Rust and AES-128 per-file keys

Generated with AI, which can make mistakes.