In six minutes on Monday, May 11, attackers compromised the very building blocks that web developers use across the country. Security experts raised the alarm regarding TanStack, the attackers’ target, about 20 minutes post-breach. But that was still enough time to create national-scale risk: dozens of trusted tools were affected, including one that gets downloaded 12.7 million times a week.

The news is only the latest in the rapidly growing field of AI-enabled cybercrime. In 2025 alone, the FBI’s Internet Crime Complaint Center (IC3) received 22,364 complaints where the victim or report included AI-related information, such as scams involving AI-generated voices, deepfakes, fake profiles, AI-assisted phishing, or other AI-enabled fraud.

New York’s state court system made an early institutional template for governing AI in litigation, with rules starting next month. (NY Courts)

A federal judge in Maine doled out milder than usual sanctions for a lawyer’s AI hallucinations. (Bloomberg Law / Justia)

The FBI’s latest data shows a sharp rise in elder fraud last year. (FBI Norfolk)

Updated federal evidence rules on AI-fabricated evidence may not take effect until December 1, 2028. (U.S. Courts)

AI was the digital factory behind a North Carolina man’s $8 million music-streaming fraud. (The Guardian)

Oregon’s labor agency is reviewing unauthorized AI use after an embarrassing fallout this week. (The Oregonian/OregonLive)