Agoda Denies Data Breach as Cybercriminals Claim Theft of 82 Million Records Asia-based travel booking platform Agoda has refuted claims of a data breach after cybercriminals alleged the theft of 82 million user records. An Agoda spokesperson stated that internal investigations confirmed the leaked data did not originate from its systems. Researchers at Cybernews analyzed a sample of 23 records provided by the attackers, which included sensitive details such as full names, identity card numbers, phone numbers, email addresses, and hotel addresses primarily linked to Malaysian users. Notably, the sample lacked reservation dates, an unusual omission that raised questions about the data’s origin. Despite this, the researchers verified the legitimacy of the exposed information. The incident follows a recent confirmation by Agoda’s parent company, Booking Holdings, of a separate breach affecting Booking.com users. That attack exposed names, phone numbers, email addresses, and reservation details, leading to a surge in reservation hijacking scams across North America, Europe, and the UK. The timing of the two incidents has heightened concerns about cybersecurity risks in the travel industry.

AI Advancements, Zero-Day Patches, and Corporate Shifts Reshape Tech Landscape This week’s tech developments highlight rapid AI innovation, escalating cybersecurity threats, and strategic corporate moves reshaping industries from robotics to enterprise software. AI Models and Assistants Take Center Stage Anthropic released Claude Opus 4.7, an upgraded AI model with improved coding, image analysis, and a self-verification system to reduce hallucinations. The model is now available across major cloud and productivity platforms at existing pricing. OpenAI expanded its Codex for Mac, adding multi-tab terminals, documentation previews, and SSH access for over three million developers, with EU and UK support coming soon. A specialized cybersecurity version, GPT-5.4-Cyber, was also introduced under a restricted-access program for verified professionals. Google DeepMind unveiled Gemini Robotics-ER 1.6, co-developed with Boston Dynamics, enhancing robot reasoning and task planning with 93% gauge-reading accuracy via "agentic vision." Microsoft is developing OpenClaw-inspired AI agents for 365 Copilot to automate Outlook, Calendar, and OneDrive tasks, with role-based silos to prevent misuse. A demo is expected at Build 2026. Anthropic also launched a Claude sidebar add-in for Microsoft Word, enabling AI-assisted drafting and cross-app collaboration, alongside Claude Cowork for macOS/Windows and Claude Managed Agents for workflow automation. Apple is preparing a standalone Siri chat app ("Campos") for iOS 27, featuring text/voice input, document analysis, and hybrid AI models (Apple + Google Gemini). Beta testing begins at WWDC in June, with a public release slated for September. Apple is also testing Siri-powered smart glasses (N50) for a potential 2027 launch, focusing on hands-free communication and media capture. Platform and Product Innovations Google introduced "Skills" in Chrome’s Gemini sidebar, allowing users to save and reuse prompts across devices. WhatsApp began testing a username feature to enable chats without exposing phone numbers, currently in limited beta. Unitree, a Chinese robotics firm, opened global preorders for its R1 humanoid robot ($6,800), targeting 20,000 units in 2026 and an upcoming IPO. China launched the world’s first wind-powered underwater data center off Shanghai, a $232 million facility supporting AI workloads with reduced energy and water use. Critical Vulnerabilities and Exploits Microsoft patched 165 Windows vulnerabilities, including two zero-days in SharePoint and Defender. Adobe issued an emergency fix for CVE-2026-34621, a critical Acrobat Reader flaw allowing sandbox escapes. Microsoft researchers also uncovered a vulnerability in the EngageLab SDK, affecting 50 million Android devices and enabling crypto wallet access. Google patched the issue in version 5.2.1. Data Breaches and Compromised Platforms Malicious WordPress plugins, injected with a PHP backdoor, compromised hundreds of thousands of sites across 30 plugins under the Essential Plugin brand. Booking.com confirmed a breach exposing traveler names, contact details, and reservation data, prompting PIN resets and phishing warnings. The EU’s new age-verification app was cracked within minutes, allowing PIN resets and biometric bypasses. Researchers also identified 108 malicious Chrome extensions stealing Google and Telegram data, now being removed by Google. Emerging Threats and Privacy Measures Cybercriminals are using emojis and Unicode characters to hide malware, prompting calls for updated detection systems. Google enabled client-side end-to-end encryption for enterprise Gmail on Android and iOS, though personal accounts remain excluded. Corporate Moves and Market Expansion Amazon announced an $11.6 billion acquisition of satellite operator Globalstar to expand its Amazon Leo network and compete with SpaceX’s Starlink. Tesla is exploring mass production of Optimus humanoid robots at its Shanghai Gigafactory, leveraging China’s manufacturing capabilities. Snap Inc. laid off 16% of its workforce (1,000 employees) as part of an AI-driven efficiency initiative, projecting $500 million in annual savings.