Sources:

• CISA: Windows Task Host flaw now exploited by ransomware gangs
• Kimi Desktop Ships With a Group Chat Updater That Can Install Unverified Code
• Operation CameraSwarm: Over 14,000 Dahua cameras compromised across Ukraine and Russia
• China-Linked APT Uses AI to Optimize Hand-Built Malware
• Chainalysis Sues US Government Over $94.6M ICE Contract Handed to Rival TRM Labs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Unauthenticated RCE in CircleCI MCP Server Explained
• Hacking the New York City Building Permit Portal | Michael Cummings
• Passkey Bypass: Three Attacks Demolish Phishing-Resistant… | DeafNews
• Revealed: Cyber spies used malware from GitHub to hack EncroChat cryptophone network | Computer Weekly
• France’s tax agency lost data on 678,000 people to a stolen login

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Hackers drained $130 million in Bitcoin from 7,300 'cold' wallets once billed as secure
• Clop Hacks Shell, GE, Philips in 43-Victim PTC Windchill Zero-Day Campaign
• macOS Screen Sharing Flaw Actively Exploited to Mine Monero: Patch Now
• Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam
• Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS… | DeafNews
• NHS Blood and Transplant investigate data breach due to pager use
• Expired domains are a goldmine for hackers – and some cyber crime groups are investing millions in 'dropcatch' scams to deliver malware
• A phone company just lost 1.6 million records to a phone call
• McDonald’s employee data listed for sale in wider Entra campaign | Ransomnews
• New Evooo1Bot Linux botnet turns routers into traffic relay nodes
• CVE-2026-33696: From a Schema Name to RCE in n8n | Simon Koeck
• Removing Exif Data Is No Longer Enough. AI Can Now Tell Where Your Photos Are Taken Without It
• U.S. courts will now make government use of spyware tools public

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Microsoft issues emergency patch as North Korean hackers caught exploiting dangerous flaw
• Open-Source AI Agents Breach Taiwan Nuclear Agency in Four-Day Autonomous Strike
• Bloom Security’s Extension Resurrection research exposes a blind spot in developer security
• 'Jewelbug' APT Balances State Espionage & Cryptocurrency Theft
• PSA: Don't trust that Chrome update popup — it could be malware

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Largest AI Supply Chain Breach of 2026: LiteLLM Hack Impacts Thousands of Global Enterprises - Claim Your Ethical Disclosure | InfoStealers
• Android malware combo takes out loans and relays victims' credit cards
• Lazarus Group Hacked Defense Workers With Windows Kernel Zero-Day for Five Weeks
• Signal adds new security feature to thwart man-in-the-middle attacks
• This Coin-Sized Device Can Hack a Boeing 737 | WIRED

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• CopyEscape: Taking Over Docker Hosts with docker cp | Imperva
• Ⓐ Cyber Security | Blog | ZOOMSDAY
• Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
• DeadLock Ransomware Hides C2 on Polygon Blockchain, 80-Plus Victims Hit
• Poland's Water Hack Prosecution Names Russians But Can't Reach Them: Default Passwords Opened Plants
• Inside the BBC’s emergency plans for a Putin cyber attack
• New Zealand Targets Russian Cyber Actors With Fresh Sanctions
• BTCPay offers $190,000 bounty after bitcoin payment servers drained in exploit

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• OpenAI launches GPT-5.6-Cyber to help defenders find vulnerabilities before attackers do

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Chinese Router Backdoor Opens Root Access on 100,000 Devices Worldwide – SOFX
• Trustfall: An RSA Heap Underwrite Into OP-TEE's Secure World · ByteRay Blog
• tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | bobdahacker
• The npm attack that turned provenance attestations into camouflage
• Hackers Use BNB Chain to Spread Malware Through Fake CAPTCHAs
• 8 out of 10 Banks in Belgium HATE This One Weird eID RCE - Am I Being Pwned?
• RovoBlast: How One Click Triggered Atlassian’s AI Assistant to Leak Data
• Hackers breach TrueConf to trojanize client installers with backdoors
• Another Bitcoin infrastructure exploit hits, this time draining Lightning payment servers
• Researchers wiretapped a whole neighborhood's fiber internet from home
• MIT researchers found a new Spectre attack that can slip past Intel and AMD defenses
• Experts warn this fake Claude install guide can be used to empty crypto wallets
• Self-destructing phone code sparks federal case
• Bypassing Windows application whitelisting | dotSec

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sources:

• Claude Code RCE: How a Malicious PR Triggers Code Execution
• CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft | Microsoft Security Blog
• Ill Bloom: Investigating a Wallet Generation Vulnerability During Active Exploitation
• Canadian Hacker Admits to Snowflake Breach That Hit AT&T, Ticketmaster
• Biggest backdoor yet found in Chinese routers sold under multiple brand names

📰 Read the full edition on the site

Sources:

• Incident Report: unsanctioned agent behaviour during cyber testing | AISI Work
• AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking
• A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide | WIRED
• Researchers Find Persistent Backdoor in Zbtlink Routers - Decipher
• Russian State Hackers Target Hotel Wi-fi to Spy on Travelers, Microsoft Reports

📰 Read the full edition on the site

Sources:

• Multiple Flaws in Google's Synced Passkey Implementation Allow Attackers to Take Over Your Accounts
• Hackers steal over $130 million by exploiting bug in offline hardware wallets
• Massive ChainDrop npm supply-chain attack infects hundreds of packages
• MSPs urged to patch immediately after N-able issues hotfix for N-central 'god mode' flaw
• This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast

📰 Read the full edition on the site

Sources:

• Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
• New Pass-ta-key attacks let malware hijack Google-synced passkeys
• SQLite Critical CVEs or LLM Slop? - JFrog Security Research
• AI enthusiast unlocks and mods BIOS with Claude Code — AI defeats RSA-2048 signature checks and unlocks 55 hidden settings | Tom's Hardware
• New DOUBLECUP ClickFix service hides malware in browser cache images
• SQLite Critical CVEs or LLM Slop? - JFrog Security Research
• AI enthusiast unlocks and mods BIOS with Claude Code — AI defeats RSA-2048 signature checks and unlocks 55 hidden settings | Tom's Hardware

📰 Read the full edition on the site

Sources:

• Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
• DeepSeek Ran Autonomous Cyberattacks That Claude and OpenAI Safety Controls Blocked
• Coldcard Hacked for $70M: How Do You Keep Bitcoin Safe if Cold Wallets Can Be Hacked?
• Arch Linux Freezes AUR Adoption: Tor-Backed Rust Infostealer Bypasses June Defenses in Third Wave
• Amazon identifies North Korean hacker group behind open-source supply chain attacks | AWS Security Blog
• A security researcher built a self-spreading worm that hides inside Word docs and hijacks Microsoft Copilot
• Over 100 Vulnerabilities Found in IRS Contractor Handling Americans' Tax Information
• Iran suspected of conducting cyberattacks on US water suppliers in 45 municipalities — small towns mostly targeted, with utilities switching to manual control
• FTX Begins $900M Payout: Kroll Breach Left Creditors Exposed to Scammers
• The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog
• AI is finding Apple security flaws faster than Apple can sort through them
• Coldcard Hacked for $70M: How Do You Keep Bitcoin Safe if Cold Wallets Can Be Hacked?

📰 Read the full edition on the site

Sources:

• CosmosEscape: Taking Over Every Azure Cosmos DB | Wiz Blog
• Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
• Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
• Russian Hackers Breached Exchange Servers With OWAReaper: Implant Survives Re-Imaging
• State Hackers Made South Korea's Mandatory Banking Software Into Zero-Day Weapon

📰 Read the full edition on the site

Sources:

• Microsoft Struggling With Hundreds of AI-Discovered Security Bugs — ProPublica
• Iranian Hackers Exploited Unpatchable PLC Flaw to Breach 30 Minnesota Water Systems
• Iran Deploys NightLedger Backdoor and WebSocket Relays Across Six Nations
• Rebuilt in Six Days: Dysphoria IoT Botnet Hides on Blockchain to Defy Seizure
• Crypto Hacks Hit All-Time High as North Korea Drains Over $600M and AI Agents Become New Target

📰 Read the full edition on the site

Sources:

• Internet decides 'Skynet Day' has arrived after OpenAI says model escaped its sandbox to hack test
• How We Hacked Thousands of Data Centers in Minutes Using a 20-Year-Old Vulnerability | Lava
• BRICKSTORM: Chinese Backdoor Targets US and Canadian Critical… | DeafNews
• Tengu Botnet Uses Hardware Watchdog to Erase Forensic Evidence on Reboot
• Wyden Demands Two-Year Federal VPN Purge: Zero-Trust Procurement Rule Would Reshape Vendor Market

📰 Read the full edition on the site

Sources:

• AI Agent Drives Espionage Attack on Thai Ministry of Finance
• Iran APT Sabotages US PLCs: CISA Warns of Physical Risk | DeafNews
• New Dysphoria DDoS botnet spreads to 200k devices worldwide
• Massive Tribeca Fest Data Leak Exposes Jennifer Lawrence, Robert De Niro and More Celebs‘ Contact Info; Meet the Man Who Discovered the Files
• Coca-Cola confirms data theft in Fairlife ransomware attack
• Massive Tribeca Fest Data Leak Exposes Jennifer Lawrence, Robert De Niro and More Celebs’ Contact Info; Meet the Man Who Discovered the Files

📰 Read the full edition on the site

Sources:

• Russian Hackers Used Ukraine as Test Ground Before Targeting US Nuclear Scientists
• New lawsuit alleges unpatchable Apple chip exploit was developed using stolen trade secrets
• Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
• JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake | Group-IB Blog
• SharedRoot; Escaping the Claude Cowork sandbox — Accomplish Blog
• OpenAI agent goes rogue and hacks popular AI community — left escape plans for future models inside the company's infrastructure
• Claude Opus 5 Hacked Enterprise Networks in 8 of 10 Government Tests, Safety Card Shows
• Fake Notepad++ Plugin Hides Russian Malware Targeting Ukrainian Defense Teams
• ClickLock Mac malware locks apps until you give in
• 8,000 Devices Infected, 80 Crypto Wallets Accessed by Video Game Malware
• Stop Writing Incident Reports, Start Writing Case Law: Gaps from OpenAI and Hugging Face Disclosure | HackerNoon
• Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

📰 Read the full edition on the site

Sources:

• Not just phishing: The scams to watch for if you're an Origin Energy customer
• Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged
• Russian hackers exploit Zimbra zero-click flaw for email theft
• Linux Kernel Flaw Exposes 16 Million RHEL Systems to Silent Root Takeover
• One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes

📰 Read the full edition on the site

Sources:

• Microsoft admits SMS and voice MFA can’t stop AI attacks, mandates passkeys in Entra by February 2027
• License Plate Reader Company Flock Is Building a Massive People Lookup Tool, Leak Shows
• Iranian Spies Now Use AI Lures, Telegram C2, and a Backdoor That Survives Password Resets
• Dolphin X Stealer Targets 300+ Apps and Profiles Users with AI
• Every frontier AI model tested by Britain's safety institute tried to cheat on cybersecurity evaluations

📰 Read the full edition on the site

Sources:

• OpenAI Models Escaped Containment and Hacked Hugging Face | WIRED
• A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now | WIRED
• Ernst & Young breach exposes client tax data - find out if you're at risk and what to do next
• Free World Cup Streams Infected Devices: DOJ Seizes 1,000 Domains in Historic Crackdown
• FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

📰 Read the full edition on the site

Sources:

• Hugging Face: We Used AI to Catch the First Confirmed AI Agent Breach of a Major AI Platform
• Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 › Searchlight Cyber
• HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels | Group-IB Blog
• RedHook Android malware can quietly hijack your phone
• Four teams just broke AI agents four ways in ten days. The flaw is the same one.

📰 Read the full edition on the site

Sources:

• Unauthenticated Debug Port in Rockwell Adapter Gives Attackers Plant-Floor Control
• GoSerpent Backdoor Looted Police and Biometric Data Across Southeast Asia for Five Years
• An Alleged Russian FSB Hacker Traveled To Thailand. Now He's Facing 10 Years In A US Prison.
• Cisco sounds alarm over new Russian malware campaign hitting firms in US and Europe
• Vishing Call Brought Down TfL: Scattered Spider Duo Jailed in Record UK Prosecution
• North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections
• FortiSandbox Exploited in Wild: Patch by Sunday or Trust Chain Collapses
• Trump says China stole 220 million U.S. voter files in largest election-data breach
• Cybercriminals released 802,000 stolen accounts in one day during the World Cup group stage
• wp2shell: pre-auth RCE in WordPress core (CVE-2026-63030) | Ransomnews
• Firefox Exploit Code Goes Public as Chrome, Adobe, VMware Ship Emergency Patches
• EY Tax Data Stolen Through Third-Party Help-Desk Platform, Four States Notified
• FBI arrests 21-year-old accused of infecting 8,000 PCs with malware through fake Steam games
• It's Laughably Easy to Poison Open-Weight AI Models, Researcher Finds

📰 Read the full edition on the site

Sources:

• Zoom warns of critical account takeover vulnerability
• 7-Zip XZ Parser RCE Vulnerability: Opening an Archive Is Enough | DeafNews
• Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking // weirdmachine64
• Just a moment...
• Coca-Cola says Fairlife ransomware attack halts US dairy production

📰 Read the full edition on the site

Sources:

• Windows BitLocker Zero-Day (CVE-2026-50661) Lets Attackers Bypass Encryption | The CyberSec Guru
• Kudankulam nuclear plant data breached, NPCIL says core systems untouched
• Microsoft patches record 570 Windows security bugs with two exploited zero days - update now
• US charges Russian 'bulletproof' web hosts over cyberattacks that netted $62M from cybercrime victims
• New Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat

📰 Read the full edition on the site

Sources:

• Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
• Forgotten UEFI shims undermining Secure Boot
• Smashing the ServiceNow Sandbox – Pre Authentication RCE › Searchlight Cyber
• Ant Group Open-Sources Agent Security Tool Days After Agentic Ransomware Hit
• Grok Build was uploading entire Git repositories to xAI's cloud, including committed secrets

📰 Read the full edition on the site

Sources:

• Agentic Ransomware Is Real and Getting Cheaper: What Comes After JadePuffer
• Now, defenders are embracing the prompt injection, too - Ars Technica
• The US government warns that Russia state hackers are coming after your router
• This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June
• CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities

📰 Read the full edition on the site

Sources:

• ChatGPT Work Launch Went Wrong: GPT-5.6 Sol Deleted User Files Without Permission
• Just a moment...
• Six AI Coding Tools Show Wrong File in Approval Box, Handing Attackers SSH Access
• The agents you use to beef up cybersecurity could be turned against you – 'Friendly Fire' attacks can manipulate OpenAI and Anthropic models into running malicious code
• 'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
• GigaWiper: Modular Windows Backdoor Combines Disk Wiper, Fake Ransomware, Spyware
• Just a moment...
• Ransomware negotiator hired to represent victims was working for the attackers - Ars Technica
• 'The false attributions were the direct product of Koi's unsupervised reliance': Startup sues Koi Security after AI tool hallucinates and links it to a Chinese spying scam
• Russian Hackers Hijacked Intercom Cameras to Spy on Ukraine Aid Routes
• China, India Hackers Weaponized Pakistan Police Portal to Hit Civilians, Officers
• RedHook Android malware now uses Wireless ADB for shell access
• Microsoft is rewriting Windows patch guidance because of AI
• Boko Haram Built AI Units for Attack Planning as ISIS Taught Jailbreaks

📰 Read the full edition on the site

Sources:

• Meta Absorbs AI Security's Top Red Team as Autonomous Ransomware Arrives
• Microsoft patches RoguePlanet Defender zero-day vulnerability
• NSA revives 'Tailored Access Operations' name for elite hacking unit | The Record from Recorded Future News
• IPsec Downgrade Attack Survives ML-KEM: Cloudflare Ships Authentication Fix
• China Warns of Claude Code 'Backdoor' Security Risk

📰 Read the full edition on the site

Sources:

• 1-in-2 phones sold in Africa exfiltrate telemetry to China - NowSecure
• Google pays $250K for Linux vulnerability allowing guest VM escapes - Ars Technica
• Ubiquiti Patches CVE-2026-50746, Maximum-Severity Flaw in UniFi… | DeafNews
• Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack
• This Massive Data Breach Compromised Nearly 7 Million Driver's Licenses

📰 Read the full edition on the site

Sources:

• DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born'
• New Januscape Linux flaw allows VM escape on Intel, AMD devices
• GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos - Noma Security
• Independent Labs Crack Google's Secret Cryptography Work
• Windows 11 identifier code used to track Scattered Spider perp after Microsoft shared info with FBI — 19-year-old US-Estonian hacker arrested over alleged ties to infamous extortion group | Tom's Hardware

📰 Read the full edition on the site

Sources:

• 2-Click Remote Code Execution in Meccha Chameleon
• Fake IT support calls on Microsoft Teams push EtherRAT malware
• A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID
• Microsoft says 'cryptographically relevant quantum computers could arrive sooner than previously expected' as it bumps its QSP timeline to 2029
• Cloudflare replaces its blanket AI bot block with granular controls for search, training, and agent crawlers

📰 Read the full edition on the site

Sources:

• Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus - The Citizen Lab
• FBI and Google Disrupt NetNut Botnet That Rented 2 Million Home Devices to Spies
• North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
• Cyber experts issue alert after two ransomware groups team up on 'unprecedented' threat campaign
• Researchers say an AI agent just ran a ransomware attack from start to finish, with no human at the keyboard
• How LLM-driven EDR evasion works | SpecterOps
• Amazon Q Vulnerability: Compromise via MCP Auto-Execution | Wiz Blog
• Seiko SkyBridge Enterprise IoT Routers Hit With Permanent OS Injection: No Fix
• Apple Compresses Patch Cycle After AI Uncovers Four WebKit Flaws | DeafNews
• 'Agentic coding tools have access to everything they need for this': Security experts warn Claude Code can be exploited simply by trying to be helpful
• Fake Mac Clipboard App Delivers New Password-Stealing Malware
• India Court Order Puts Your Domain Registration Data at Risk Worldwide

📰 Read the full edition on the site

Sources:

• CISA: Microsoft SharePoint RCE flaw now actively exploited
• Canada’s electronic spy agency conducted cyberattacks on criminals brokering fentanyl ingredients, report says - The Globe and Mail
• I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. | bobdahacker
• Google: This Proxy Service Is Using TV Streaming Devices to Host Cybercrime
• Opera now blocks one of the sneakiest malware tricks around

📰 Read the full edition on the site

Sources:

• CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
• Russian Hackers Gamaredon Weaponize WinRAR Flaw for First Destructive Strike
• China-Linked Mustang Panda Hides Spy Tools Inside India's Trusted Cloud Storage App
• SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
• CISA: Windows BlueHammer flaw now exploited by ransomware gangs

📰 Read the full edition on the site

Sources:

• Microsoft Removes 119 Edge Extensions Hiding… | DeafNews
• US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw - Infosecurity Magazine
• Apple accelerates security updates in response to AI-powered hacking risks
• Warner bill would create federally vetted list for secure, trustworthy AI agents
• Supreme Court Supports Privacy Protections for Cellphone Location Data

📰 Read the full edition on the site

Sources:

• Russian hackers were behind the Jaguar Land Rover attack that cost the British economy two and a half billion dollars
• Iranian national U.S. sought for $3.4 billion in hacking attacks arrested in Montenegro
• Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace
• GTA VI fans beware — experts warn 'a new wave of scam websites' is offering early access, but just stealing your bank details instead
• When cybercriminals hire burglars: Inside an alleged Russian effort to infiltrate multibillion-dollar US law firms
• Clone This Repo and I Own Your Machine | 0din.ai
• Polymarket Loses $3.1M to Frontend Vendor Hack While CFTC Investigation Deepens

📰 Read the full edition on the site

Sources:

• 15 Malicious JetBrains Plugins Stole AI API Keys from 70,000 Developers | Halting Problems
• '27 million stolen login credentials have been recovered': Global coordinated takedown hits SocGholish, Amadey, and StealC malware networks where it hurt
• macOS security flaw lets hackers disable Mac protection tools without a password
• Fake USB Sticks Spread China-Linked Virus in Japan's Army
• 'You can't patch your way out of it': Cheap AI worm can spread between devices without human guidance — but how did scientists create it?

📰 Read the full edition on the site

Sources:

• macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts - Decipher
• CISA warns of max severity Ubiquiti flaws exploited in attacks
• One-two punch delivered in global operation disrupts cybercrime "assembly line"
• Amateur Hacker Used Claude And OpenAI Agents To Hack 14 Companies
• Accenture snaps up majority stake in Dragos, acquires runZero and NetRise in critical infrastructure security push

📰 Read the full edition on the site

Sources:

• LastPass Breached via Klue Supply-Chain Attack:… | DeafNews
• Tata Electronics Breach: 200,000 Files Leaked,… | DeafNews
• Anthropic’s Mythos model found vulnerabilities in classified US government systems, official says
• 'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows
• New macOS ClickFix attack silently mounts DMGs to push infostealer

📰 Read the full edition on the site

Sources:

• How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack
• Apple, Tesla documents exposed after hackers hit Tata: report
• Microsoft scrambles to patch a Defender security flaw called RoguePlanet
• Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes - TechRepublic
• Supercomputing on a Credit Card From The AI Rush Enabled The Massive FortiBleed Campaign | InfoStealers

📰 Read the full edition on the site

Sources:

• Post-Quantum Cryptography Meets China's Quantum Computer: What the Shield Leaves Exposed
• Chicago Experts Warn AI Chatbots Could Leak Data
• Alleged China ties at SK Telecom alarmed US officials and triggered Anthropic crisis
• Google Deepmind treats its own AI agents like rogue employees with office keys
• Europol is going rogue – so Brussels is doubling its budget??
• Singaporean brothers use unsolvable maths equations to build modern, unbreakable encryption
• India's Telegram Ban Upheld by Court, Putting 150 Million Users and Every Encrypted App at Risk
• Council of Europe Data Breach: ShinyHunters Makes 10,000 Employees' Records Permanent
• Failed Cyber Test: Alabama Defense Contractor Settles For $500K Over Missing Navy Safeguards
• It looks like an old PC, but this bleeding-edge 'server' may well save us from hackers causing chaos in a post-quantum computing world — 4.1Gb/s 'rackable' quantum random number generator brings entropy to the data center
• Popular free VPN, streaming apps bombard business networks with 'laundered' traffic used by criminals to 'blend into normal consumer noise' — here's how to keep safe

📰 Read the full edition on the site

Sources:

• Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp
• PSA: Steam's most popular PC background app was reportedly infected with malware via Wallpaper Engine's workshop
• Researchers say sweeping hack campaign against Fortinet devices compromised prominent organisations
• Meet Kali365 — the 'Amazon of cybercrime' where hackers use AI to completely circumvent multi-factor authentication
• France to Phase Out Non-Quantum Encryption as Bitcoin Security Concerns Grow

📰 Read the full edition on the site

Sources:

• Hacking group claims major hack of Novo Nordisk, seeks $25M ransom
• Conti Ransomware Loader Developer Pleads Guilty in $150M Operation Riptide Case
• Attackers hijacked over 1,500 Arch Linux packages to steal developers' secrets, no hacking required
• A new Android trojan called Rokarolla targets 217 banking apps and can steal your PIN, SMS codes, and crypto wallet funds
• Hackers Just Published Knicks and Madison Square Garden Data
• SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon
• Google's big Android sideloading crackdown has a 24-hour catch - how the new limits work
• Windows and Linux users: The deadline to update Secure Boot keys is near
• A 76-year-old was about to lose his entire $3 million retirement to a scam. TIAA’s AI caught it—but a human prevented disaster
• Malicious apps got into the Arch User Repository - how to protect yourself
• Hacking group claims it breached Novo Nordisk and demanded $25m

📰 Read the full edition on the site

Sources:

• FBI disrupts massive AI-powered phishing service using a million URLs
• Chinese hackers breach REDCap servers, steal medical research
• Ukrainian man pleads guilty in US to Conti ransomware charges
• AI is fueling a surge of new ransomware threats: Travelers
• Ransomware Preparedness Must Be a Boardroom Priority: NCSC Chief
• FBI dismantles Chinese phishing service that coached buyers to generate scam sites using AI —$88 cybercrime product linked to $1.9 billion in losses, 3.87 million stolen cards

📰 Read the full edition on the site

Sources:

• Critical Google Chrome 0-Day Exploited in the Wild, Plus Microsoft and ServiceNow Under Fire
• Authorities dismantle 'AudiA6' ransomware crypto-laundering service
• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks
• Google says Chinese cybercrime group used its AI in scams
• The FBI secretly built an entire fake town just to practice cyberattacks
• Hacking Google with A.I. for $500,000 · Brutecat
• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks

📰 Read the full edition on the site

Sources:

• Coupang hit with record $409 million data breach fine in Korea
• The researcher Microsoft threatened just dropped a seventh Windows zero-day hours after Patch Tuesday
• FBI Seizes 13 Sites Tied to China's Covert Effort to Hire US Officials
• Researchers tricked an OpenClaw AI agent into leaking AWS keys and customer data with a phishing email
• OpenAI Bans Chinese Accounts for Anti-AI Influence Campaigns

📰 Read the full edition on the site

Sources:

• Boston FBI Joins Takedown Of 'First VPN' Used By Ransomware
• I got inside a North Korean hiring scam. What I found reveals a troubling shift in tactics
• CrowdStrike Warns China Is Behind 58% Of State-Backed Cyber Attacks As Chinese and North Korean Hackers Hunt US AI Secrets
• Microsoft smashes record for biggest ever Patch Tuesday update | Computer Weekly
• New Veeam vulnerability exposes backup servers to RCE attacks

📰 Read the full edition on the site

Sources:

• France’s ‘sovereign’ messenger Tchap was breached, and officials and the hacker disagree on how badly
• A 'massive escalation in electronic warfare': researchers show how Russian satellites can jam GPS across Europe — and a mysterious series of ‘interference events’ show it could already be happening
• Check Point VPN Flaw Exploited Since Early May
• For the 2nd time in weeks, Microsoft packages laced with credential stealer
• Microsoft Hacked to Deliver Malware to Claude and Gemini Users

📰 Read the full edition on the site