Sources:

• Atlassian’s critical flaw turns eight enterprise products into one big security problem | CSO Online
• FBI, French authorities seize deepfake CSAM-for-sale websites
• Ransomware recovery CEO charged over secret ransom payments
• PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
• Hackers obtain counterfeit TLS certificates for Google and other large services - Ars Technica

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
• Danish data breach: Everything we know about the cyber attack that hit 8.8m Danes
• Arizona Court Cyberattack Exposes Data on 1.3 Million People
• Georgia Power says hackers accessed 400,000 customer accounts
• Engineer sentenced for locking over 3,000 devices on employer network

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• KVM zero-day vulnerability enables VM escape to host root | Cybernews
• Windows malware uses Grok AI to help stay hidden, researchers say
• Hackers Breached Propulsion System of US-Bound Oil Tanker
• New Dell System Update flaw lets hackers gain root privileges
• Trump Mobile’s latest problem: Hackers just released customer information

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Hackers Backdoor Fortinet FortiMail Email Gateways With No Password; Patches Unavailable
• Microsoft 2026 Security Report: Autonomous Ransomware Has Hacked Real Organizations
• Warlock ransomware breach SharePoint in water, telecom operator attacks
• Android malware can steal your PIN and bank logins
• Your used CPU might come with someone else’s Valorant ban
• CVE-2026-93355: Account Takeover in LiteLLM | OX Security
• Malicious VPN config files can let attackers run commands on Asus routers
• Federal judge calls Flock ‘indiscriminate mass surveillance’
• Chainalysis Used AI to Trace the $387M Bitget Hack Back to North Korea
• FBI Arrests First Ever Cyber Fugitive on Top 10 Most Wanted List
• Citrix patches NetScaler SAML zero-day exploited in attacks
• Police dismantle KillSec ransomware gang allegedly led by 16-year-old
• Chinese Hackers Impersonate Anthropic Employee to Extract AI Secrets
• Mac malware can hide commands in your iCloud calendar
• Iranian national extradited to US over alleged $3.4 billion state-backed hacking campaign in rare legal win for law enforcement

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• PaperCut MF Zero-Day Intrusion: Java Loader, Web Shell, and AdaptixC2 via CVE-2026-82078 and CVE-2026-81578 | eSentire
• From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities - SEC Consult
• Kevin Mandia’s new ‘agent swarm’ security startup Armadin raises $255.5M at $2.5B valuation
• Microsoft says threat actors are ahead in the early AI race
• Amnesty Report Documents Morocco's Sustained Spyware Campaign Against Civil Society

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Pwnd Blaster: Hacking your PC using your speaker without ever touching it | nns.ee
• New macOS malware masquerades as Zoom installer
• Russian state hackers use new RedFlick technique to push malware
• TeamViewer urges users to patch severe flaws “as soon as possible”
• Cloudflare plans to issue quantum-safe TLS certificates

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• New Spectre v2 attack variant leaks Linux root password hash in minutes
• A Realistic Code Execution Exploit Chain in OpenBao and Vault
• Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond
• Suspected ShinyHunters leader arrested in the Netherlands
• 80 Days Reverse Engineering an IoT DVR: What I Found and Why It Didn't Work Out — Leviathan OffSec

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• FBI grapples with fallout from massive data breach
• Pentagon breach exposed sensitive data on nearly 3 million people
• Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) | Datadog Security Labs
• Escalating Windows Privileges: Exploiting NCSI Vulnerabilities
• Sender spoofing in Proton Mail via display-name homograph | protonmail-sender-spoofing

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• OpenAI says its AI agents escaped a secure ‘sandbox’ again last weekend and is pausing training for a second time
• EX-ARRR: Sailing the 0-click Seas - ironPeak Blog
• Researchers Warn of Citrix NetScaler Exploitation - Decipher
• How I Could’ve Accessed 17 Trillion Microsoft Records | blog.faav.net
• There's a new way to break RSA that's faster than anything we've seen before - Ars Technica
• WhatsApp malware campaign uses DLL sideloading and BYOVD to target business users
• Hackers took home a stolen Flock camera. What they found was massive
• Rydox marketplace admin pleads guilty, faces 22 years in prison
• Scammers are going after young Roblox players and their Robux
• How CISA plans to shake up the CVE program
• EDR Evasion: Process Injection Without WriteProcessMemory
• Refrigerator Malfunctions Cause National Security Concerns
• CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2
• I Told an AI Agent to Rob My Store. It Found 39 Ways to Do It | HackerNoon
• Chinese hackers targeted shipping in at least seven EU countries, cyber agency reports – POLITICO

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Forging 1024-bit RSA signatures in nearly SNFS time
• Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’ | The Record from Recorded Future News
• Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL | nns.ee
• Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges
• A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight | WIRED

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
• NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
• Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
• F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks
• Homeland Security is monitoring activists building anti-flock tech

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• vCenter pre-auth RCE: CVE-2026-59309/59310 | Mobeta
• GitHub App Private Keys: 474 Leaked Keys Still Work
• New ClosedQuorum Windows malware uses AI for attack decisions
• Stolen passwords are exposing America’s water providers to hackers
• D-Link warns of max severity zero-day bug in DIR-822A routers

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• CISA alerts of active exploitation of three Linux kernel flaws
• Hackers are hiding malware on blockchains that are nearly impossible to take down, and unrestricted AI models have pushed these attacks up 440%
• WordPress Click2Shell flaw lets hackers execute PHP on the server
• Downloading Zoom or Brave? Could Be New Mac Malware ‘Sonoma’ In Disguise | HackerNoon
• ShinyHunters says it hijacked Cl0p’s dark web leak site

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• New Check Point flaw lets hackers execute code with root privileges
• Guest to host: escaping Docker's hypervisor — Accomplish Blog
• North Korean WaterPlum hackers infected 30,000 devices worldwide
• An undercover Google analyst infiltrated a notorious supply-chain hacking gang
• Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
• Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
• Malicious npm packages evade install-script defenses at runtime
• Infected PHP Themes on Streaming Sites: The iOS Chain That… | DeafNews
• Slovakia discovers Russian backdoors in 279 new traffic cameras — SMS-triggered shell access and passwordless live feeds found in EU-funded rollout | Tom's Hardware
• SolarWinds Patches Hard-Coded Cryptographic Key in ARM:… | DeafNews
• We got a cybersecurity expert to hack this BYD. It was too easy
• MFA Won't Save You From OAuth Consent Abuse
• European Password Manager Shares Origins and Updates with State-Certified Russian Firm - VSquare.org
• Five Suicides in Five Weeks: Cyber Command Had Prior NDAA Fix; Funding May Not Follow

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Cisco warns of max severity ISE zero-day exploited in attacks
• PhantomFix: a fabricated bug that hijacks an AI autofix agent (CVE-2026-90999)
• China's FamousSparrow APT Spies on US Politics in Latin America
• Malicious JavaScript Evaded VirusTotal in Seven of Eight E-Commerce Storefront Attacks
• Bug Hunters Used Claude to Hack OpenAI

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• FBI disrupts Russian plot to carry out targeted killings on US soil, indictment says
• Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
• Malware bypasses browser checks to force install Chrome, Edge extensions
• Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works | WIRED
• A Quote in a Folder Name Opens Root on Mac: The Parallels Bug | DeafNews

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation - SecurityWeek
• ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks - SecurityWeek
• Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files
• Cyber Op Targets South Korean Media & Automotive Sectors
• Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution - Rhino Security Labs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Maximum Severity GitLab Flaw Puts Supply Chains at Risk
• Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
• Ransomware gang leaks more than half a million files after Florida DMV hack
• Former Forensic Analyst Sentenced To 10 Years For DNA Manipulation
• National Security Agency plans major internal restructuring: report

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Cisco Firewall Manager Hacked by Sandworm Espionage Implant and Qilin Ransomware
• OpenAI agents attacked software service RubyGems before Hugging Face hack
• Passkey-themed phishing attacks lead to Microsoft 365 data theft
• 153 million driver's license scans may be on the dark web
• Google Leaked Sex Crime Victims' Data Beyond Korea
• Conti ransomware gang member sentenced to 4 years in prison
• Code Hidden In 'White-Labeled' Routers Gives Chinese Servers Full Control
• Thousands of hacked sites trick you into installing malware
• ClickFix attacks infecting PCs and Macs are going viral
• Revolut confirms customer data breach through fake government requests
• North Korea is paying people $500 a month in Nigeria, South Africa, India and Iran to help fake workers get jobs inside US companies
• Hackers exploit Tencent app flaw to deploy GrayRabbit malware
• Russian Hackers Used Claude AI to Target Ukraine
• Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you'd hoped for

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Microsoft patches a record 974 flaws, and two are already under attack
• CISA: WatchGuard RCE flaw now exploited in ransomware attacks
• New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
• Researchers used AI to build a WeChat worm that spreads through phone calls
• LG TVs Caught Secretly Recording Users and Scanning Their Homes For Other Devices, Even When Disconnected From the Internet

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Researcher reverse-engineers infamous Stuxnet malware source code, publishes it on Github for all — attack targeted Iranian nuclear facilities and was the first software of its type to cause physical damage
• Is Shai-Hulud back? Researchers spot 'wormy boy' slipping past npm malware scanning features
• Researchers find a hole in Microsoft's anti-spoofing fix
• ₹5043 crore saved: How India is building a real-time defence against digital fraud
• Russian hackers may have used fake CAPTCHA to hack Ukrainian government computers

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit
• Chinese Hackers Use AI On Stolen Networks To Speed Up Attacks
• North Korea Trojanized HAProxy in South Korea, Turning SSL Termination Into Wiretap
• UAE calls for ‘Cyber Geneva Convention’ to treat major cyberattacks as acts of war
• Tech company discloses first-of-its-kind A.I. cyberattack against a government

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Google issues emergency update for Chrome after unknown bug detected
• BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
• Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
• ConnectWise warns of new ScreenConnect flaw without patch
• Cyber criminals are adapting ASCII smuggling for mass phishing campaigns

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Serbia Used Pegasus Zero-Click Exploit on Student Activists; iOS 18.4.1 Patches It
• Darknavy Claims It Cracked the Starlink Terminal After SpaceX Hardened It
• 67,000 More Trezor Customers Exposed as Data Breach Widens
• CISA Cuts Six Free Cyber Assessments Utilities and Hospitals Cannot Afford to Replace
• New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
• Berlin cyberattack: hackers leak highly sensitive data across dark web
• US military disables ad trackers amid concerns over troops’ safety
• OpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosure
• US AI startup micro1 to top Google bid for Spirit data
• An AI hacking trick is now being used to split the word ‘funding’ in spam
• FBI launches investigation into theft of millions of Americans’ and Canadians’ stolen driver’s licenses
• Winona paid $128K ransom after January cyberattack
• Germany plans anti-sabotage shield after airport drone attack, Bild reports
• Should you use a separate computer for online banking?

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Attackers exploit zero-days in consistently besieged SonicWall product
• The 24-hour CRA deadline is changing software supply chain visibility
• IT helpdesk impersonation hits Microsoft Teams once again, with the hackers hiding their activity within legitimate tools
• Critical Elementor Pro flaw exploited to take over WordPress sites
• AI agents can now remember and hackers can ‘poison’ their memories — a new cybersecurity threat

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Identity Verification Is Broken. The 153 Million Driver’s Licenses Now for Sale Are Proof
• OpenAI's Astra Becomes Its First AI Model With 'Critical' Hacking Abilities
• Dropbox says 5,000 accounts were breached through a Lenovo login
• ICE Is Paying a Controversial AI Firm to Hide the Identities of Agents
• Researchers easily trick Fortune-500 companies' AI agents into running arbitrary code — supply-chain attack via llms.txt guidance file illustrates how data has become code

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Berlin's Seven-Day Ransomware Isolation Gap Let Rhysida Steal Critical Infrastructure Data
• Russian cybercrime operation being dismantled after two decades, US officials and CrowdStrike say
• Dropbox breach seemingly caused by egregious authentication failure
• New ClickFix campaign can deploy powerful multi-stage malware directly through Windows Terminal and PowerShell
• AI Agents Now Discover Zero-Days to Escape Virtual Machines, Trail of Bits Proves

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Anthropic tightens security on its training environment after Claude agents went rogue 3 times
• Chinese Fire Ant hackers turn Cisco routers into spying platforms
• Frontier AI Cyberattacks Now Rank Above Sovereign Debt in FSB G20 Warning

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• McKesson discloses breach after ShinyHunters claims patient data theft
• ATF confirms cyberattack hit system containing info on its investigation targets
• Cyberattack on 3 UK Airports Exposes Data of 8.7 Million Customers
• How a Poisoned Scanner Reached 2,500 Companies Through One AI Supply-Chain Package | HackerNoon
• Fake North Korean IT workers are rampant: Here’s how to spot the telltale signs a new hire is a hacker
• Android 17 Hides Your Browsing Destinations From Carriers, Closing HTTPS Privacy Gap
• Cosmos Labs says it wrongly cleared the bug behind a $5.7 million six-chain hack
• The world’s first Android Auto trojan turns millions of car radios into a global botnet—experts sound the alarm
• Brave browser adds email aliases to help users evade tracking
• Cambodia shuts down 700 scam centers, arrests 30,000 in cybercrime crackdown
• Polygon Quietly Patched Security Flaws in Two Hard Forks Before Disclosing Them
• Anthropic warns infostealer malware is hijacking Claude sessions to drain usage
• Chrome Web Store extensions caught stealing crypto, browser data
• Key Factors IT Managers Should Consider When Choosing an Enterprise Password Manager | HackerNoon

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• New type of attack can slip past the defenses in your computer’s processor
• AI Finds Critical Flaw in Bitcoin Lightning, Devs Issue Emergency Warning
• OpenAI Agents Formed Secret Swarm, Hacked Hugging Face, Then Forged Their Own Logs
• FBI San Diego Seizes Domains Powering China-Linked Hack Network Hitting NASA, Fed
• Carhartt data breach exposes information of 12.9 million accounts

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Critical Avada WordPress theme flaw enables zero-click RCE
• Hackers now exploit critical Gitea flaw in code injection attacks
• Pro-Russian group claims credit for biggest-ever hack on Norway government services after $9.2 billion pledge to Ukraine
• State actors tried to hack EU officials' messaging apps, cybersecurity body warns
• Tap-to-pay charity scam can cost you thousands

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Calix GigaSpire Flaw Lets Strangers Control Your Home Firewall: No Patch
• OpenAI subpoenaed by Alabama attorney general over Hugging Face hack
• Attackers Exploit WordPress SSO Plugin; Six Paid Editions Were Never in Any Vulnerability Database
• Hackers abuse npm mirrors to host phishing redirect pages
• UK gov floats new essential services measures in Cyber Security and Resilience Bill – including a potential ban on buying from risky vendors

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• CISA orders urgent patching of actively exploited Zimbra flaw
• Foul Language: WordlistLoader Disguises Malware as Ordinary Text
• Encrypted Prompts Defeat Grok and Gemini Guardrails; Chat Histories Stolen
• This Android banking trojan uses a fake VPN prompt to silence Google's defenses
• Canadian SickKids hospital hit again by cyberattacks, more data stolen

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Coldcard Adds New Security Measures After $130 Million Bitcoin Exploit
• Russia asked the UN for a treaty against ‘extremism,’ ‘subversion,’ and ‘discrediting the authorities.’ Instead, it got one that covers hacking and fraud. — Meduza
• OWASP Flags Top AI Skill Risks in New Security Blueprint
• Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants
• Hackers abuse FTP server banners to deliver new Windows malware
• Trump plan taps US firms to fight foreign cybercrime
• Iranian hackers carry out unprecedented attack on UK’s power network
• Hackers infect Android car head units with proxy botnet malware
• India urges Google to remove Firebase accounts with ties to bank fraud
• AI Has Made Bitcoin Software a Target—This Group Is Fighting Back
• ToxicPanda Android malware uses VPN permissions to block Google Play
• Your boss’s monitoring app didn’t just watch you — it shared your data to Facebook and a Russian search engine
• AI agent hacks gym system to move up waitlist
• Why is AI going on a hacking spree?

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Hundreds of Fake VPNs Are Flooding the Chrome Web Store
• Iranian Hackers Tied to $6 Million Bitcoin Extortion Charged in Massive Cyber Campaign
• Nearly 2,000 Hacked WordPress Sites Turned Into Criminal Infrastructure
• Data belonging to 3.75 million patients was exposed in the CareCloud breach – not the 350,000 originally reported
• US says hackers are targeting vulnerable water systems with the help of AI

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Sakura Internet hack exposes data of up to 1.36 million accounts
• Russia's GRU Hacked Ukraine's Sanctioned-Asset Agency Days Before $165M Deadline
• Apple Just Fixed 29 Security Flaws Across iPhone, iPad, and Mac, Including One That Could Expose Your Network Traffic to Attackers
• ClarityCheck people-finder left millions of face photos exposed, likely without their knowledge
• CISA: Medusa ransomware hit over 500 critical infrastructure orgs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• CISA: Windows Task Host flaw now exploited by ransomware gangs
• Kimi Desktop Ships With a Group Chat Updater That Can Install Unverified Code
• Operation CameraSwarm: Over 14,000 Dahua cameras compromised across Ukraine and Russia
• China-Linked APT Uses AI to Optimize Hand-Built Malware
• Chainalysis Sues US Government Over $94.6M ICE Contract Handed to Rival TRM Labs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Unauthenticated RCE in CircleCI MCP Server Explained
• Hacking the New York City Building Permit Portal | Michael Cummings
• Passkey Bypass: Three Attacks Demolish Phishing-Resistant… | DeafNews
• Revealed: Cyber spies used malware from GitHub to hack EncroChat cryptophone network | Computer Weekly
• France’s tax agency lost data on 678,000 people to a stolen login

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Hackers drained $130 million in Bitcoin from 7,300 'cold' wallets once billed as secure
• Clop Hacks Shell, GE, Philips in 43-Victim PTC Windchill Zero-Day Campaign
• macOS Screen Sharing Flaw Actively Exploited to Mine Monero: Patch Now
• Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam
• Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS… | DeafNews
• NHS Blood and Transplant investigate data breach due to pager use
• Expired domains are a goldmine for hackers – and some cyber crime groups are investing millions in 'dropcatch' scams to deliver malware
• A phone company just lost 1.6 million records to a phone call
• McDonald’s employee data listed for sale in wider Entra campaign | Ransomnews
• New Evooo1Bot Linux botnet turns routers into traffic relay nodes
• CVE-2026-33696: From a Schema Name to RCE in n8n | Simon Koeck
• Removing Exif Data Is No Longer Enough. AI Can Now Tell Where Your Photos Are Taken Without It
• U.S. courts will now make government use of spyware tools public

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Microsoft issues emergency patch as North Korean hackers caught exploiting dangerous flaw
• Open-Source AI Agents Breach Taiwan Nuclear Agency in Four-Day Autonomous Strike
• Bloom Security’s Extension Resurrection research exposes a blind spot in developer security
• 'Jewelbug' APT Balances State Espionage & Cryptocurrency Theft
• PSA: Don't trust that Chrome update popup — it could be malware

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Largest AI Supply Chain Breach of 2026: LiteLLM Hack Impacts Thousands of Global Enterprises - Claim Your Ethical Disclosure | InfoStealers
• Android malware combo takes out loans and relays victims' credit cards
• Lazarus Group Hacked Defense Workers With Windows Kernel Zero-Day for Five Weeks
• Signal adds new security feature to thwart man-in-the-middle attacks
• This Coin-Sized Device Can Hack a Boeing 737 | WIRED

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• CopyEscape: Taking Over Docker Hosts with docker cp | Imperva
• Ⓐ Cyber Security | Blog | ZOOMSDAY
• Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
• DeadLock Ransomware Hides C2 on Polygon Blockchain, 80-Plus Victims Hit
• Poland's Water Hack Prosecution Names Russians But Can't Reach Them: Default Passwords Opened Plants
• Inside the BBC’s emergency plans for a Putin cyber attack
• New Zealand Targets Russian Cyber Actors With Fresh Sanctions
• BTCPay offers $190,000 bounty after bitcoin payment servers drained in exploit

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• OpenAI launches GPT-5.6-Cyber to help defenders find vulnerabilities before attackers do

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Chinese Router Backdoor Opens Root Access on 100,000 Devices Worldwide – SOFX
• Trustfall: An RSA Heap Underwrite Into OP-TEE's Secure World · ByteRay Blog
• tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | bobdahacker
• The npm attack that turned provenance attestations into camouflage
• Hackers Use BNB Chain to Spread Malware Through Fake CAPTCHAs
• 8 out of 10 Banks in Belgium HATE This One Weird eID RCE - Am I Being Pwned?
• RovoBlast: How One Click Triggered Atlassian’s AI Assistant to Leak Data
• Hackers breach TrueConf to trojanize client installers with backdoors
• Another Bitcoin infrastructure exploit hits, this time draining Lightning payment servers
• Researchers wiretapped a whole neighborhood's fiber internet from home
• MIT researchers found a new Spectre attack that can slip past Intel and AMD defenses
• Experts warn this fake Claude install guide can be used to empty crypto wallets
• Self-destructing phone code sparks federal case
• Bypassing Windows application whitelisting | dotSec

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Claude Code RCE: How a Malicious PR Triggers Code Execution
• CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft | Microsoft Security Blog
• Ill Bloom: Investigating a Wallet Generation Vulnerability During Active Exploitation
• Canadian Hacker Admits to Snowflake Breach That Hit AT&T, Ticketmaster
• Biggest backdoor yet found in Chinese routers sold under multiple brand names

📰 Read the full edition on the site

Sources:

• Incident Report: unsanctioned agent behaviour during cyber testing | AISI Work
• AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking
• A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide | WIRED
• Researchers Find Persistent Backdoor in Zbtlink Routers - Decipher
• Russian State Hackers Target Hotel Wi-fi to Spy on Travelers, Microsoft Reports

📰 Read the full edition on the site

Sources:

• Multiple Flaws in Google's Synced Passkey Implementation Allow Attackers to Take Over Your Accounts
• Hackers steal over $130 million by exploiting bug in offline hardware wallets
• Massive ChainDrop npm supply-chain attack infects hundreds of packages
• MSPs urged to patch immediately after N-able issues hotfix for N-central 'god mode' flaw
• This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast

📰 Read the full edition on the site

Sources:

• Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
• New Pass-ta-key attacks let malware hijack Google-synced passkeys
• SQLite Critical CVEs or LLM Slop? - JFrog Security Research
• AI enthusiast unlocks and mods BIOS with Claude Code — AI defeats RSA-2048 signature checks and unlocks 55 hidden settings | Tom's Hardware
• New DOUBLECUP ClickFix service hides malware in browser cache images
• SQLite Critical CVEs or LLM Slop? - JFrog Security Research
• AI enthusiast unlocks and mods BIOS with Claude Code — AI defeats RSA-2048 signature checks and unlocks 55 hidden settings | Tom's Hardware

📰 Read the full edition on the site

Sources:

• Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
• DeepSeek Ran Autonomous Cyberattacks That Claude and OpenAI Safety Controls Blocked
• Coldcard Hacked for $70M: How Do You Keep Bitcoin Safe if Cold Wallets Can Be Hacked?
• Arch Linux Freezes AUR Adoption: Tor-Backed Rust Infostealer Bypasses June Defenses in Third Wave
• Amazon identifies North Korean hacker group behind open-source supply chain attacks | AWS Security Blog
• A security researcher built a self-spreading worm that hides inside Word docs and hijacks Microsoft Copilot
• Over 100 Vulnerabilities Found in IRS Contractor Handling Americans' Tax Information
• Iran suspected of conducting cyberattacks on US water suppliers in 45 municipalities — small towns mostly targeted, with utilities switching to manual control
• FTX Begins $900M Payout: Kroll Breach Left Creditors Exposed to Scammers
• The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog
• AI is finding Apple security flaws faster than Apple can sort through them
• Coldcard Hacked for $70M: How Do You Keep Bitcoin Safe if Cold Wallets Can Be Hacked?

📰 Read the full edition on the site

Sources:

• CosmosEscape: Taking Over Every Azure Cosmos DB | Wiz Blog
• Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
• Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
• Russian Hackers Breached Exchange Servers With OWAReaper: Implant Survives Re-Imaging
• State Hackers Made South Korea's Mandatory Banking Software Into Zero-Day Weapon

📰 Read the full edition on the site

Sources:

• Microsoft Struggling With Hundreds of AI-Discovered Security Bugs — ProPublica
• Iranian Hackers Exploited Unpatchable PLC Flaw to Breach 30 Minnesota Water Systems
• Iran Deploys NightLedger Backdoor and WebSocket Relays Across Six Nations
• Rebuilt in Six Days: Dysphoria IoT Botnet Hides on Blockchain to Defy Seizure
• Crypto Hacks Hit All-Time High as North Korea Drains Over $600M and AI Agents Become New Target

📰 Read the full edition on the site

Sources:

• Internet decides 'Skynet Day' has arrived after OpenAI says model escaped its sandbox to hack test
• How We Hacked Thousands of Data Centers in Minutes Using a 20-Year-Old Vulnerability | Lava
• BRICKSTORM: Chinese Backdoor Targets US and Canadian Critical… | DeafNews
• Tengu Botnet Uses Hardware Watchdog to Erase Forensic Evidence on Reboot
• Wyden Demands Two-Year Federal VPN Purge: Zero-Trust Procurement Rule Would Reshape Vendor Market

📰 Read the full edition on the site

Sources:

• AI Agent Drives Espionage Attack on Thai Ministry of Finance
• Iran APT Sabotages US PLCs: CISA Warns of Physical Risk | DeafNews
• New Dysphoria DDoS botnet spreads to 200k devices worldwide
• Massive Tribeca Fest Data Leak Exposes Jennifer Lawrence, Robert De Niro and More Celebs‘ Contact Info; Meet the Man Who Discovered the Files
• Coca-Cola confirms data theft in Fairlife ransomware attack
• Massive Tribeca Fest Data Leak Exposes Jennifer Lawrence, Robert De Niro and More Celebs’ Contact Info; Meet the Man Who Discovered the Files

📰 Read the full edition on the site

Sources:

• Russian Hackers Used Ukraine as Test Ground Before Targeting US Nuclear Scientists
• New lawsuit alleges unpatchable Apple chip exploit was developed using stolen trade secrets
• Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
• JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake | Group-IB Blog
• SharedRoot; Escaping the Claude Cowork sandbox — Accomplish Blog
• OpenAI agent goes rogue and hacks popular AI community — left escape plans for future models inside the company's infrastructure
• Claude Opus 5 Hacked Enterprise Networks in 8 of 10 Government Tests, Safety Card Shows
• Fake Notepad++ Plugin Hides Russian Malware Targeting Ukrainian Defense Teams
• ClickLock Mac malware locks apps until you give in
• 8,000 Devices Infected, 80 Crypto Wallets Accessed by Video Game Malware
• Stop Writing Incident Reports, Start Writing Case Law: Gaps from OpenAI and Hugging Face Disclosure | HackerNoon
• Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

📰 Read the full edition on the site

Sources:

• Not just phishing: The scams to watch for if you're an Origin Energy customer
• Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged
• Russian hackers exploit Zimbra zero-click flaw for email theft
• Linux Kernel Flaw Exposes 16 Million RHEL Systems to Silent Root Takeover
• One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes

📰 Read the full edition on the site

Sources:

• Microsoft admits SMS and voice MFA can’t stop AI attacks, mandates passkeys in Entra by February 2027
• License Plate Reader Company Flock Is Building a Massive People Lookup Tool, Leak Shows
• Iranian Spies Now Use AI Lures, Telegram C2, and a Backdoor That Survives Password Resets
• Dolphin X Stealer Targets 300+ Apps and Profiles Users with AI
• Every frontier AI model tested by Britain's safety institute tried to cheat on cybersecurity evaluations

📰 Read the full edition on the site

Sources:

• OpenAI Models Escaped Containment and Hacked Hugging Face | WIRED
• A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now | WIRED
• Ernst & Young breach exposes client tax data - find out if you're at risk and what to do next
• Free World Cup Streams Infected Devices: DOJ Seizes 1,000 Domains in Historic Crackdown
• FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

📰 Read the full edition on the site

Sources:

• Hugging Face: We Used AI to Catch the First Confirmed AI Agent Breach of a Major AI Platform
• Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 › Searchlight Cyber
• HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels | Group-IB Blog
• RedHook Android malware can quietly hijack your phone
• Four teams just broke AI agents four ways in ten days. The flaw is the same one.

📰 Read the full edition on the site

Sources:

• Unauthenticated Debug Port in Rockwell Adapter Gives Attackers Plant-Floor Control
• GoSerpent Backdoor Looted Police and Biometric Data Across Southeast Asia for Five Years
• An Alleged Russian FSB Hacker Traveled To Thailand. Now He's Facing 10 Years In A US Prison.
• Cisco sounds alarm over new Russian malware campaign hitting firms in US and Europe
• Vishing Call Brought Down TfL: Scattered Spider Duo Jailed in Record UK Prosecution
• North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections
• FortiSandbox Exploited in Wild: Patch by Sunday or Trust Chain Collapses
• Trump says China stole 220 million U.S. voter files in largest election-data breach
• Cybercriminals released 802,000 stolen accounts in one day during the World Cup group stage
• wp2shell: pre-auth RCE in WordPress core (CVE-2026-63030) | Ransomnews
• Firefox Exploit Code Goes Public as Chrome, Adobe, VMware Ship Emergency Patches
• EY Tax Data Stolen Through Third-Party Help-Desk Platform, Four States Notified
• FBI arrests 21-year-old accused of infecting 8,000 PCs with malware through fake Steam games
• It's Laughably Easy to Poison Open-Weight AI Models, Researcher Finds

📰 Read the full edition on the site

Sources:

• Zoom warns of critical account takeover vulnerability
• 7-Zip XZ Parser RCE Vulnerability: Opening an Archive Is Enough | DeafNews
• Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking // weirdmachine64
• Just a moment...
• Coca-Cola says Fairlife ransomware attack halts US dairy production

📰 Read the full edition on the site

Sources:

• Windows BitLocker Zero-Day (CVE-2026-50661) Lets Attackers Bypass Encryption | The CyberSec Guru
• Kudankulam nuclear plant data breached, NPCIL says core systems untouched
• Microsoft patches record 570 Windows security bugs with two exploited zero days - update now
• US charges Russian 'bulletproof' web hosts over cyberattacks that netted $62M from cybercrime victims
• New Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat

📰 Read the full edition on the site

Sources:

• Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
• Forgotten UEFI shims undermining Secure Boot
• Smashing the ServiceNow Sandbox – Pre Authentication RCE › Searchlight Cyber
• Ant Group Open-Sources Agent Security Tool Days After Agentic Ransomware Hit
• Grok Build was uploading entire Git repositories to xAI's cloud, including committed secrets

📰 Read the full edition on the site

Sources:

• Agentic Ransomware Is Real and Getting Cheaper: What Comes After JadePuffer
• Now, defenders are embracing the prompt injection, too - Ars Technica
• The US government warns that Russia state hackers are coming after your router
• This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June
• CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities

📰 Read the full edition on the site

Sources:

• ChatGPT Work Launch Went Wrong: GPT-5.6 Sol Deleted User Files Without Permission
• Just a moment...
• Six AI Coding Tools Show Wrong File in Approval Box, Handing Attackers SSH Access
• The agents you use to beef up cybersecurity could be turned against you – 'Friendly Fire' attacks can manipulate OpenAI and Anthropic models into running malicious code
• 'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
• GigaWiper: Modular Windows Backdoor Combines Disk Wiper, Fake Ransomware, Spyware
• Just a moment...
• Ransomware negotiator hired to represent victims was working for the attackers - Ars Technica
• 'The false attributions were the direct product of Koi's unsupervised reliance': Startup sues Koi Security after AI tool hallucinates and links it to a Chinese spying scam
• Russian Hackers Hijacked Intercom Cameras to Spy on Ukraine Aid Routes
• China, India Hackers Weaponized Pakistan Police Portal to Hit Civilians, Officers
• RedHook Android malware now uses Wireless ADB for shell access
• Microsoft is rewriting Windows patch guidance because of AI
• Boko Haram Built AI Units for Attack Planning as ISIS Taught Jailbreaks

📰 Read the full edition on the site

Sources:

• Meta Absorbs AI Security's Top Red Team as Autonomous Ransomware Arrives
• Microsoft patches RoguePlanet Defender zero-day vulnerability
• NSA revives 'Tailored Access Operations' name for elite hacking unit | The Record from Recorded Future News
• IPsec Downgrade Attack Survives ML-KEM: Cloudflare Ships Authentication Fix
• China Warns of Claude Code 'Backdoor' Security Risk

📰 Read the full edition on the site

Sources:

• 1-in-2 phones sold in Africa exfiltrate telemetry to China - NowSecure
• Google pays $250K for Linux vulnerability allowing guest VM escapes - Ars Technica
• Ubiquiti Patches CVE-2026-50746, Maximum-Severity Flaw in UniFi… | DeafNews
• Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack
• This Massive Data Breach Compromised Nearly 7 Million Driver's Licenses

📰 Read the full edition on the site

Sources:

• DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born'
• New Januscape Linux flaw allows VM escape on Intel, AMD devices
• GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos - Noma Security
• Independent Labs Crack Google's Secret Cryptography Work
• Windows 11 identifier code used to track Scattered Spider perp after Microsoft shared info with FBI — 19-year-old US-Estonian hacker arrested over alleged ties to infamous extortion group | Tom's Hardware

📰 Read the full edition on the site

Sources:

• 2-Click Remote Code Execution in Meccha Chameleon
• Fake IT support calls on Microsoft Teams push EtherRAT malware
• A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID
• Microsoft says 'cryptographically relevant quantum computers could arrive sooner than previously expected' as it bumps its QSP timeline to 2029
• Cloudflare replaces its blanket AI bot block with granular controls for search, training, and agent crawlers

📰 Read the full edition on the site

Sources:

• Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus - The Citizen Lab
• FBI and Google Disrupt NetNut Botnet That Rented 2 Million Home Devices to Spies
• North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
• Cyber experts issue alert after two ransomware groups team up on 'unprecedented' threat campaign
• Researchers say an AI agent just ran a ransomware attack from start to finish, with no human at the keyboard
• How LLM-driven EDR evasion works | SpecterOps
• Amazon Q Vulnerability: Compromise via MCP Auto-Execution | Wiz Blog
• Seiko SkyBridge Enterprise IoT Routers Hit With Permanent OS Injection: No Fix
• Apple Compresses Patch Cycle After AI Uncovers Four WebKit Flaws | DeafNews
• 'Agentic coding tools have access to everything they need for this': Security experts warn Claude Code can be exploited simply by trying to be helpful
• Fake Mac Clipboard App Delivers New Password-Stealing Malware
• India Court Order Puts Your Domain Registration Data at Risk Worldwide

📰 Read the full edition on the site

Sources:

• CISA: Microsoft SharePoint RCE flaw now actively exploited
• Canada’s electronic spy agency conducted cyberattacks on criminals brokering fentanyl ingredients, report says - The Globe and Mail
• I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. | bobdahacker
• Google: This Proxy Service Is Using TV Streaming Devices to Host Cybercrime
• Opera now blocks one of the sneakiest malware tricks around

📰 Read the full edition on the site

Sources:

• CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
• Russian Hackers Gamaredon Weaponize WinRAR Flaw for First Destructive Strike
• China-Linked Mustang Panda Hides Spy Tools Inside India's Trusted Cloud Storage App
• SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
• CISA: Windows BlueHammer flaw now exploited by ransomware gangs

📰 Read the full edition on the site

Sources:

• Microsoft Removes 119 Edge Extensions Hiding… | DeafNews
• US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw - Infosecurity Magazine
• Apple accelerates security updates in response to AI-powered hacking risks
• Warner bill would create federally vetted list for secure, trustworthy AI agents
• Supreme Court Supports Privacy Protections for Cellphone Location Data

📰 Read the full edition on the site

Sources:

• Russian hackers were behind the Jaguar Land Rover attack that cost the British economy two and a half billion dollars
• Iranian national U.S. sought for $3.4 billion in hacking attacks arrested in Montenegro
• Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace
• GTA VI fans beware — experts warn 'a new wave of scam websites' is offering early access, but just stealing your bank details instead
• When cybercriminals hire burglars: Inside an alleged Russian effort to infiltrate multibillion-dollar US law firms
• Clone This Repo and I Own Your Machine | 0din.ai
• Polymarket Loses $3.1M to Frontend Vendor Hack While CFTC Investigation Deepens

📰 Read the full edition on the site

Sources:

• 15 Malicious JetBrains Plugins Stole AI API Keys from 70,000 Developers | Halting Problems
• '27 million stolen login credentials have been recovered': Global coordinated takedown hits SocGholish, Amadey, and StealC malware networks where it hurt
• macOS security flaw lets hackers disable Mac protection tools without a password
• Fake USB Sticks Spread China-Linked Virus in Japan's Army
• 'You can't patch your way out of it': Cheap AI worm can spread between devices without human guidance — but how did scientists create it?

📰 Read the full edition on the site

Sources:

• macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts - Decipher
• CISA warns of max severity Ubiquiti flaws exploited in attacks
• One-two punch delivered in global operation disrupts cybercrime "assembly line"
• Amateur Hacker Used Claude And OpenAI Agents To Hack 14 Companies
• Accenture snaps up majority stake in Dragos, acquires runZero and NetRise in critical infrastructure security push

📰 Read the full edition on the site

Sources:

• LastPass Breached via Klue Supply-Chain Attack:… | DeafNews
• Tata Electronics Breach: 200,000 Files Leaked,… | DeafNews
• Anthropic’s Mythos model found vulnerabilities in classified US government systems, official says
• 'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows
• New macOS ClickFix attack silently mounts DMGs to push infostealer

📰 Read the full edition on the site

Sources:

• How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack
• Apple, Tesla documents exposed after hackers hit Tata: report
• Microsoft scrambles to patch a Defender security flaw called RoguePlanet
• Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes - TechRepublic
• Supercomputing on a Credit Card From The AI Rush Enabled The Massive FortiBleed Campaign | InfoStealers

📰 Read the full edition on the site

Sources:

• Post-Quantum Cryptography Meets China's Quantum Computer: What the Shield Leaves Exposed
• Chicago Experts Warn AI Chatbots Could Leak Data
• Alleged China ties at SK Telecom alarmed US officials and triggered Anthropic crisis
• Google Deepmind treats its own AI agents like rogue employees with office keys
• Europol is going rogue – so Brussels is doubling its budget??
• Singaporean brothers use unsolvable maths equations to build modern, unbreakable encryption
• India's Telegram Ban Upheld by Court, Putting 150 Million Users and Every Encrypted App at Risk
• Council of Europe Data Breach: ShinyHunters Makes 10,000 Employees' Records Permanent
• Failed Cyber Test: Alabama Defense Contractor Settles For $500K Over Missing Navy Safeguards
• It looks like an old PC, but this bleeding-edge 'server' may well save us from hackers causing chaos in a post-quantum computing world — 4.1Gb/s 'rackable' quantum random number generator brings entropy to the data center
• Popular free VPN, streaming apps bombard business networks with 'laundered' traffic used by criminals to 'blend into normal consumer noise' — here's how to keep safe

📰 Read the full edition on the site

Sources:

• Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp
• PSA: Steam's most popular PC background app was reportedly infected with malware via Wallpaper Engine's workshop
• Researchers say sweeping hack campaign against Fortinet devices compromised prominent organisations
• Meet Kali365 — the 'Amazon of cybercrime' where hackers use AI to completely circumvent multi-factor authentication
• France to Phase Out Non-Quantum Encryption as Bitcoin Security Concerns Grow

📰 Read the full edition on the site

Sources:

• Hacking group claims major hack of Novo Nordisk, seeks $25M ransom
• Conti Ransomware Loader Developer Pleads Guilty in $150M Operation Riptide Case
• Attackers hijacked over 1,500 Arch Linux packages to steal developers' secrets, no hacking required
• A new Android trojan called Rokarolla targets 217 banking apps and can steal your PIN, SMS codes, and crypto wallet funds
• Hackers Just Published Knicks and Madison Square Garden Data
• SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon
• Google's big Android sideloading crackdown has a 24-hour catch - how the new limits work
• Windows and Linux users: The deadline to update Secure Boot keys is near
• A 76-year-old was about to lose his entire $3 million retirement to a scam. TIAA’s AI caught it—but a human prevented disaster
• Malicious apps got into the Arch User Repository - how to protect yourself
• Hacking group claims it breached Novo Nordisk and demanded $25m

📰 Read the full edition on the site

Sources:

• FBI disrupts massive AI-powered phishing service using a million URLs
• Chinese hackers breach REDCap servers, steal medical research
• Ukrainian man pleads guilty in US to Conti ransomware charges
• AI is fueling a surge of new ransomware threats: Travelers
• Ransomware Preparedness Must Be a Boardroom Priority: NCSC Chief
• FBI dismantles Chinese phishing service that coached buyers to generate scam sites using AI —$88 cybercrime product linked to $1.9 billion in losses, 3.87 million stolen cards

📰 Read the full edition on the site

Sources:

• Critical Google Chrome 0-Day Exploited in the Wild, Plus Microsoft and ServiceNow Under Fire
• Authorities dismantle 'AudiA6' ransomware crypto-laundering service
• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks
• Google says Chinese cybercrime group used its AI in scams
• The FBI secretly built an entire fake town just to practice cyberattacks
• Hacking Google with A.I. for $500,000 · Brutecat
• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks

📰 Read the full edition on the site

Sources:

• Coupang hit with record $409 million data breach fine in Korea
• The researcher Microsoft threatened just dropped a seventh Windows zero-day hours after Patch Tuesday
• FBI Seizes 13 Sites Tied to China's Covert Effort to Hire US Officials
• Researchers tricked an OpenClaw AI agent into leaking AWS keys and customer data with a phishing email
• OpenAI Bans Chinese Accounts for Anti-AI Influence Campaigns

📰 Read the full edition on the site

Sources:

• Boston FBI Joins Takedown Of 'First VPN' Used By Ransomware
• I got inside a North Korean hiring scam. What I found reveals a troubling shift in tactics
• CrowdStrike Warns China Is Behind 58% Of State-Backed Cyber Attacks As Chinese and North Korean Hackers Hunt US AI Secrets
• Microsoft smashes record for biggest ever Patch Tuesday update | Computer Weekly
• New Veeam vulnerability exposes backup servers to RCE attacks

📰 Read the full edition on the site

Sources:

• France’s ‘sovereign’ messenger Tchap was breached, and officials and the hacker disagree on how badly
• A 'massive escalation in electronic warfare': researchers show how Russian satellites can jam GPS across Europe — and a mysterious series of ‘interference events’ show it could already be happening
• Check Point VPN Flaw Exploited Since Early May
• For the 2nd time in weeks, Microsoft packages laced with credential stealer
• Microsoft Hacked to Deliver Malware to Claude and Gemini Users

📰 Read the full edition on the site