CISA warns of SharePoint attacks; Canada strikes fentanyl brokers; FIFA platform exposed; NetNut botnet disrupted; Opera blocks clipboard hijacking.

Sources:

• CISA: Microsoft SharePoint RCE flaw now actively exploited
• Canada’s electronic spy agency conducted cyberattacks on criminals brokering fentanyl ingredients, report says - The Globe and Mail
• I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. | bobdahacker
• Google: This Proxy Service Is Using TV Streaming Devices to Host Cybercrime
• Opera now blocks one of the sneakiest malware tricks around

📰 Read the full edition on the site

CitrixBleed memory overread, Gamaredon's first wiper, Mustang Panda's cloud spies, SimpleHelp bypass exploited, and BlueHammer now in ransomware campaigns.

Sources:

• CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
• Russian Hackers Gamaredon Weaponize WinRAR Flaw for First Destructive Strike
• China-Linked Mustang Panda Hides Spy Tools Inside India's Trusted Cloud Storage App
• SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
• CISA: Windows BlueHammer flaw now exploited by ransomware gangs

📰 Read the full edition on the site

Microsoft purges 119 malware-laced Edge extensions; NAIC breach exposes credit data; Apple fast-patches for AI risks; Warner bill targets AI agents; SCOTUS curbs geofencing.

Sources:

• Microsoft Removes 119 Edge Extensions Hiding… | DeafNews
• US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw - Infosecurity Magazine
• Apple accelerates security updates in response to AI-powered hacking risks
• Warner bill would create federally vetted list for secure, trustworthy AI agents
• Supreme Court Supports Privacy Protections for Cellphone Location Data

📰 Read the full edition on the site

JLR attack blamed on Russian hackers, DirtyClone root exploit goes public, and more in today's security briefing.

Sources:

• Russian hackers were behind the Jaguar Land Rover attack that cost the British economy two and a half billion dollars
• Iranian national U.S. sought for $3.4 billion in hacking attacks arrested in Montenegro
• Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace
• GTA VI fans beware — experts warn 'a new wave of scam websites' is offering early access, but just stealing your bank details instead
• When cybercriminals hire burglars: Inside an alleged Russian effort to infiltrate multibillion-dollar US law firms
• Clone This Repo and I Own Your Machine | 0din.ai
• Polymarket Loses $3.1M to Frontend Vendor Hack While CFTC Investigation Deepens

📰 Read the full edition on the site

JetBrains plugins stole 70K API keys; Europol freezes $47M; macOS flaw disables security tools; AI worm spreads autonomously.

Sources:

• 15 Malicious JetBrains Plugins Stole AI API Keys from 70,000 Developers | Halting Problems
• '27 million stolen login credentials have been recovered': Global coordinated takedown hits SocGholish, Amadey, and StealC malware networks where it hurt
• macOS security flaw lets hackers disable Mac protection tools without a password
• Fake USB Sticks Spread China-Linked Virus in Japan's Army
• 'You can't patch your way out of it': Cheap AI worm can spread between devices without human guidance — but how did scientists create it?

📰 Read the full edition on the site

North Korean macOS backdoor, critical Ubiquiti flaws, Operation Endgame takedown, AI-powered amateur hacker, and Accenture's $4.175B OT security play.

Sources:

• macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts - Decipher
• CISA warns of max severity Ubiquiti flaws exploited in attacks
• One-two punch delivered in global operation disrupts cybercrime "assembly line"
• Amateur Hacker Used Claude And OpenAI Agents To Hack 14 Companies
• Accenture snaps up majority stake in Dragos, acquires runZero and NetRise in critical infrastructure security push

📰 Read the full edition on the site

LastPass data exposed via Klue, Tata leaks 200K files, Anthropic's Mythos finds US gov flaws, and more.

Sources:

• LastPass Breached via Klue Supply-Chain Attack:… | DeafNews
• Tata Electronics Breach: 200,000 Files Leaked,… | DeafNews
• Anthropic’s Mythos model found vulnerabilities in classified US government systems, official says
• 'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows
• New macOS ClickFix attack silently mounts DMGs to push infostealer

📰 Read the full edition on the site

Over 100 Romanian hospitals went offline to stop ransomware; a zero-day in Defender; and a GPU cluster cracked 75,000 Fortinet firewalls.

Sources:

• How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack
• Apple, Tesla documents exposed after hackers hit Tata: report
• Microsoft scrambles to patch a Defender security flaw called RoguePlanet
• Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes - TechRepublic
• Supercomputing on a Credit Card From The AI Rush Enabled The Massive FortiBleed Campaign | InfoStealers

📰 Read the full edition on the site

Today's top stories: China's quantum computer test, Anthropic model shutdown, Telegram ban upheld, Europol shadow IT, and more.

Sources:

• Post-Quantum Cryptography Meets China's Quantum Computer: What the Shield Leaves Exposed
• Chicago Experts Warn AI Chatbots Could Leak Data
• Alleged China ties at SK Telecom alarmed US officials and triggered Anthropic crisis
• Google Deepmind treats its own AI agents like rogue employees with office keys
• Europol is going rogue – so Brussels is doubling its budget??
• Singaporean brothers use unsolvable maths equations to build modern, unbreakable encryption
• India's Telegram Ban Upheld by Court, Putting 150 Million Users and Every Encrypted App at Risk
• Council of Europe Data Breach: ShinyHunters Makes 10,000 Employees' Records Permanent
• Failed Cyber Test: Alabama Defense Contractor Settles For $500K Over Missing Navy Safeguards
• It looks like an old PC, but this bleeding-edge 'server' may well save us from hackers causing chaos in a post-quantum computing world — 4.1Gb/s 'rackable' quantum random number generator brings entropy to the data center
• Popular free VPN, streaming apps bombard business networks with 'laundered' traffic used by criminals to 'blend into normal consumer noise' — here's how to keep safe

📰 Read the full edition on the site

SocGholish takedown, Fortinet breach, AI phishing on Steam, and France's quantum deadline.

Sources:

• Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp
• PSA: Steam's most popular PC background app was reportedly infected with malware via Wallpaper Engine's workshop
• Researchers say sweeping hack campaign against Fortinet devices compromised prominent organisations
• Meet Kali365 — the 'Amazon of cybercrime' where hackers use AI to completely circumvent multi-factor authentication
• France to Phase Out Non-Quantum Encryption as Bitcoin Security Concerns Grow

📰 Read the full edition on the site