MIT researchers unveil TONTOU, a new attack class defeating Intel and AMD processor defenses, plus OpenAI agent swarm, FBI domain seizures, and more.

Sources:

• New type of attack can slip past the defenses in your computer’s processor
• AI Finds Critical Flaw in Bitcoin Lightning, Devs Issue Emergency Warning
• OpenAI Agents Formed Secret Swarm, Hacked Hugging Face, Then Forged Their Own Logs
• FBI San Diego Seizes Domains Powering China-Linked Hack Network Hitting NASA, Fed
• Carhartt data breach exposes information of 12.9 million accounts

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Critical Avada and Gitea flaws under active exploitation, Norway hit by biggest-ever cyberattack, and EU officials targeted in Signal and WhatsApp spearphishing.

Sources:

• Critical Avada WordPress theme flaw enables zero-click RCE
• Hackers now exploit critical Gitea flaw in code injection attacks
• Pro-Russian group claims credit for biggest-ever hack on Norway government services after $9.2 billion pledge to Ukraine
• State actors tried to hack EU officials' messaging apps, cybersecurity body warns
• Tap-to-pay charity scam can cost you thousands

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

A critical Calix router vulnerability allows unauthenticated remote firewall changes; OpenAI faces Alabama subpoena over AI agent hack.

Sources:

• Calix GigaSpire Flaw Lets Strangers Control Your Home Firewall: No Patch
• OpenAI subpoenaed by Alabama attorney general over Hugging Face hack
• Attackers Exploit WordPress SSO Plugin; Six Paid Editions Were Never in Any Vulnerability Database
• Hackers abuse npm mirrors to host phishing redirect pages
• UK gov floats new essential services measures in Cyber Security and Resilience Bill – including a potential ban on buying from risky vendors

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

CISA mandates urgent patching of a Zimbra RCE bug, while new research unveils a stealthy malware loader, encrypted AI jailbreaks, and an Android trojan.

Sources:

• CISA orders urgent patching of actively exploited Zimbra flaw
• Foul Language: WordlistLoader Disguises Malware as Ordinary Text
• Encrypted Prompts Defeat Grok and Gemini Guardrails; Chat Histories Stolen
• This Android banking trojan uses a fake VPN prompt to silence Google's defenses
• Canadian SickKids hospital hit again by cyberattacks, more data stolen

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Coldcard firmware flaw drains $130M in Bitcoin; Coinkite ships security overhaul. Plus: UN cybercrime treaty, AI agent risks, and more.

Sources:

• Coldcard Adds New Security Measures After $130 Million Bitcoin Exploit
• Russia asked the UN for a treaty against ‘extremism,’ ‘subversion,’ and ‘discrediting the authorities.’ Instead, it got one that covers hacking and fraud. — Meduza
• OWASP Flags Top AI Skill Risks in New Security Blueprint
• Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants
• Hackers abuse FTP server banners to deliver new Windows malware
• Trump plan taps US firms to fight foreign cybercrime
• Iranian hackers carry out unprecedented attack on UK’s power network
• Hackers infect Android car head units with proxy botnet malware
• India urges Google to remove Firebase accounts with ties to bank fraud
• AI Has Made Bitcoin Software a Target—This Group Is Fighting Back
• ToxicPanda Android malware uses VPN permissions to block Google Play
• Your boss’s monitoring app didn’t just watch you — it shared your data to Facebook and a Russian search engine
• AI agent hacks gym system to move up waitlist
• Why is AI going on a hacking spree?

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Hundreds of fake VPNs target Russian users, plus a massive data breach revision and new charges in a $6M Bitcoin extortion case.

Sources:

• Hundreds of Fake VPNs Are Flooding the Chrome Web Store
• Iranian Hackers Tied to $6 Million Bitcoin Extortion Charged in Massive Cyber Campaign
• Nearly 2,000 Hacked WordPress Sites Turned Into Criminal Infrastructure
• Data belonging to 3.75 million patients was exposed in the CareCloud breach – not the 350,000 originally reported
• US says hackers are targeting vulnerable water systems with the help of AI

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Japanese cloud provider Sakura Internet says hackers accessed its sales system, potentially compromising up to 1.36 million member accounts.

Sources:

• Sakura Internet hack exposes data of up to 1.36 million accounts
• Russia's GRU Hacked Ukraine's Sanctioned-Asset Agency Days Before $165M Deadline
• Apple Just Fixed 29 Security Flaws Across iPhone, iPad, and Mac, Including One That Could Expose Your Network Traffic to Attackers
• ClarityCheck people-finder left millions of face photos exposed, likely without their knowledge
• CISA: Medusa ransomware hit over 500 critical infrastructure orgs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

CISA flags CVE-2025-60710 as abused by ransomware; a single operator compromises over 14,000 Dahua cameras in Ukraine and Russia.

Sources:

• CISA: Windows Task Host flaw now exploited by ransomware gangs
• Kimi Desktop Ships With a Group Chat Updater That Can Install Unverified Code
• Operation CameraSwarm: Over 14,000 Dahua cameras compromised across Ukraine and Russia
• China-Linked APT Uses AI to Optimize Hand-Built Malware
• Chainalysis Sues US Government Over $94.6M ICE Contract Handed to Rival TRM Labs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Unauthenticated RCE in CircleCI MCP server, NYC permit portal IDOR fixed, passkey bypasses, EncroChat malware origin, French tax data breach.

Sources:

• Unauthenticated RCE in CircleCI MCP Server Explained
• Hacking the New York City Building Permit Portal | Michael Cummings
• Passkey Bypass: Three Attacks Demolish Phishing-Resistant… | DeafNews
• Revealed: Cyber spies used malware from GitHub to hack EncroChat cryptophone network | Computer Weekly
• France’s tax agency lost data on 678,000 people to a stolen login

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Coldcard wallet exploit drains $130M in Bitcoin, Clop hits Shell and GE, and macOS Screen Sharing flaw mines Monero.

Sources:

• Hackers drained $130 million in Bitcoin from 7,300 'cold' wallets once billed as secure
• Clop Hacks Shell, GE, Philips in 43-Victim PTC Windchill Zero-Day Campaign
• macOS Screen Sharing Flaw Actively Exploited to Mine Monero: Patch Now
• Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam
• Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS… | DeafNews
• NHS Blood and Transplant investigate data breach due to pager use
• Expired domains are a goldmine for hackers – and some cyber crime groups are investing millions in 'dropcatch' scams to deliver malware
• A phone company just lost 1.6 million records to a phone call
• McDonald’s employee data listed for sale in wider Entra campaign | Ransomnews
• New Evooo1Bot Linux botnet turns routers into traffic relay nodes
• CVE-2026-33696: From a Schema Name to RCE in n8n | Simon Koeck
• Removing Exif Data Is No Longer Enough. AI Can Now Tell Where Your Photos Are Taken Without It
• U.S. courts will now make government use of spyware tools public

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.