A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuffer". What does this tell us about the future of cybersecurity?Also, Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year.All this and more in this episode of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Zoë Rose.EPISODE LINKS:Politician who investigated spyware abuses had his phone hacked with Pegasus spyware - TechCrunch.Hackers breached DHS information-sharing network, people familiar say - Nextgov.Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware - Hackread.Japanese teen arrested for cyberattack that unsubscribed over 46,000 anime accounts - The Straits Times.Police arrest high school student over cyberattack on net cafe operator - The Japan Times.Japanese teens arrested for using AI to create illegal phone contracts - The Peninsula Qatar.JADEPUFFER: Agentic ransomware for automated database extortion - Sysdig.Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses - 404 Media.Two people arrested in apparent marriage proposal atop Empire State Building - The Guardian.Skywalkers: A Love Story - Netflix.Thermomix - Vorwerk.Operation Safe Escape.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)SPONSORS:Arctic Wolf - See why 1 in 3 IT assets is missing a critical security control. Download the 2026 State of the Cybersecurity Attack Surface report.NordLayer - the network security platform for modern teams across different work environments. Use code NLSUMMER26 for up to 20% off annual plans.Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!