Researchers forged 1024-bit RSA signatures without factoring the key, and Iran-linked CHOSEN BRICK spyware targeted dissidents in a joint US-UK-Dutch alert.

Sources:

• Forging 1024-bit RSA signatures in nearly SNFS time
• Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’ | The Record from Recorded Future News
• Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL | nns.ee
• Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges
• A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight | WIRED

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

ShinyHunters says it hacked the FBI through an unpatched Oracle PeopleSoft zero-day, stole up to 3TB, and defaced the FBI jobs site.

Sources:

• ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
• NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
• Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
• F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks
• Homeland Security is monitoring activists building anti-flock tech

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Two CVSS 9.8 vCenter flaws, one exploited in the wild, plus 474 still-valid leaked GitHub App keys and a Gemini-powered malware implant.

Sources:

• vCenter pre-auth RCE: CVE-2026-59309/59310 | Mobeta
• GitHub App Private Keys: 474 Leaked Keys Still Work
• New ClosedQuorum Windows malware uses AI for attack decisions
• Stolen passwords are exposing America’s water providers to hackers
• D-Link warns of max severity zero-day bug in DIR-822A routers

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

A 14-year-old kernel race condition, an ebtables out-of-bounds write and a kTLS logic flaw are under active attack, with federal fixes due today.

Sources:

• CISA alerts of active exploitation of three Linux kernel flaws
• Hackers are hiding malware on blockchains that are nearly impossible to take down, and unrestricted AI models have pushed these attacks up 440%
• WordPress Click2Shell flaw lets hackers execute PHP on the server
• Downloading Zoom or Brave? Could Be New Mac Malware ‘Sonoma’ In Disguise | HackerNoon
• ShinyHunters says it hijacked Cl0p’s dark web leak site

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Check Point patches a critical root RCE, Docker fixes a Mac sandbox escape, and North Korea's WaterPlum breached 30,000 devices in 100+ countries.

Sources:

• New Check Point flaw lets hackers execute code with root privileges
• Guest to host: escaping Docker's hypervisor — Accomplish Blog
• North Korean WaterPlum hackers infected 30,000 devices worldwide
• An undercover Google analyst infiltrated a notorious supply-chain hacking gang
• Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
• Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
• Malicious npm packages evade install-script defenses at runtime
• Infected PHP Themes on Streaming Sites: The iOS Chain That… | DeafNews
• Slovakia discovers Russian backdoors in 279 new traffic cameras — SMS-triggered shell access and passwordless live feeds found in EU-funded rollout | Tom's Hardware
• SolarWinds Patches Hard-Coded Cryptographic Key in ARM:… | DeafNews
• We got a cybersecurity expert to hack this BYD. It was too easy
• MFA Won't Save You From OAuth Consent Abuse
• European Password Manager Shares Origins and Updates with State-Certified Russian Firm - VSquare.org
• Five Suicides in Five Weeks: Cyber Command Had Prior NDAA Fix; Funding May Not Follow

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Cisco patches a maximum-severity ISE authentication bypass under active attack as CISA orders federal agencies to fix it within three days.

Sources:

• Cisco warns of max severity ISE zero-day exploited in attacks
• PhantomFix: a fabricated bug that hijacks an AI autofix agent (CVE-2026-90999)
• China's FamousSparrow APT Spies on US Politics in Latin America
• Malicious JavaScript Evaded VirusTotal in Seven of Eight E-Commerce Storefront Attacks
• Bug Hunters Used Claude to Hack OpenAI

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

FBI disrupts Russian assassination network, Iranian CHOSEN BRICK malware spreads, and a Parallels bug hands root to any local process on macOS.

Sources:

• FBI disrupts Russian plot to carry out targeted killings on US soil, indictment says
• Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
• Malware bypasses browser checks to force install Chrome, Edge extensions
• Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works | WIRED
• A Quote in a Folder Name Opens Root on Mac: The Parallels Bug | DeafNews

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Cisco Secure Email Gateway zero-day under attack, ConnectWise patches worm-exploited ScreenConnect flaw, and a Redis botnet hit 3,562 servers.

Sources:

• Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation - SecurityWeek
• ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks - SecurityWeek
• Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files
• Cyber Op Targets South Korean Media & Automotive Sectors
• Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution - Rhino Security Labs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

A maximum-severity GitLab bug is already being exploited to steal CI/CD secrets, while ShinyHunters dumps 594,701 Florida DMV files.

Sources:

• Maximum Severity GitLab Flaw Puts Supply Chains at Risk
• Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
• Ransomware gang leaks more than half a million files after Florida DMV hack
• Former Forensic Analyst Sentenced To 10 Years For DNA Manipulation
• National Security Agency plans major internal restructuring: report

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Cisco Talos ties three attacker clusters to two FMC flaws, one rated CVSS 10.0, as CISA sets a September 12 federal patch deadline.

Sources:

• Cisco Firewall Manager Hacked by Sandworm Espionage Implant and Qilin Ransomware
• OpenAI agents attacked software service RubyGems before Hugging Face hack
• Passkey-themed phishing attacks lead to Microsoft 365 data theft
• 153 million driver's license scans may be on the dark web
• Google Leaked Sex Crime Victims' Data Beyond Korea
• Conti ransomware gang member sentenced to 4 years in prison
• Code Hidden In 'White-Labeled' Routers Gives Chinese Servers Full Control
• Thousands of hacked sites trick you into installing malware
• ClickFix attacks infecting PCs and Macs are going viral
• Revolut confirms customer data breach through fake government requests
• North Korea is paying people $500 a month in Nigeria, South Africa, India and Iran to help fake workers get jobs inside US companies
• Hackers exploit Tencent app flaw to deploy GrayRabbit malware
• Russian Hackers Used Claude AI to Target Ukraine
• Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you'd hoped for

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.