Ransomware, supply chain attacks, and a Copilot zero-day — your daily security briefing.

Sources:

• Hacking group claims major hack of Novo Nordisk, seeks $25M ransom
• Conti Ransomware Loader Developer Pleads Guilty in $150M Operation Riptide Case
• Attackers hijacked over 1,500 Arch Linux packages to steal developers' secrets, no hacking required
• A new Android trojan called Rokarolla targets 217 banking apps and can steal your PIN, SMS codes, and crypto wallet funds
• Hackers Just Published Knicks and Madison Square Garden Data
• SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon
• Google's big Android sideloading crackdown has a 24-hour catch - how the new limits work
• Windows and Linux users: The deadline to update Secure Boot keys is near
• A 76-year-old was about to lose his entire $3 million retirement to a scam. TIAA’s AI caught it—but a human prevented disaster
• Malicious apps got into the Arch User Repository - how to protect yourself
• Hacking group claims it breached Novo Nordisk and demanded $25m

📰 Read the full edition on the site

FBI dismantles China-based phishing service, Conti member pleads guilty, medical research breached, and ransomware activity hits record levels.

Sources:

• FBI disrupts massive AI-powered phishing service using a million URLs
• Chinese hackers breach REDCap servers, steal medical research
• Ukrainian man pleads guilty in US to Conti ransomware charges
• AI is fueling a surge of new ransomware threats: Travelers
• Ransomware Preparedness Must Be a Boardroom Priority: NCSC Chief
• FBI dismantles Chinese phishing service that coached buyers to generate scam sites using AI —$88 cybercrime product linked to $1.9 billion in losses, 3.87 million stolen cards

📰 Read the full edition on the site

Google patches exploited Chrome zero-day; ShinyHunters hit PeopleSoft; FBI trains in fake town; AudiA6 dismantled; and more.

Sources:

• Critical Google Chrome 0-Day Exploited in the Wild, Plus Microsoft and ServiceNow Under Fire
• Authorities dismantle 'AudiA6' ransomware crypto-laundering service
• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks
• Google says Chinese cybercrime group used its AI in scams
• The FBI secretly built an entire fake town just to practice cyberattacks
• Hacking Google with A.I. for $500,000 · Brutecat
• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks

📰 Read the full edition on the site

Coupang hit with $409M fine over 37M customer breach; researcher drops 7th zero-day; FBI seizes 13 Chinese spy sites; AI agent phished; OpenAI bans influence accounts.

Sources:

• Coupang hit with record $409 million data breach fine in Korea
• The researcher Microsoft threatened just dropped a seventh Windows zero-day hours after Patch Tuesday
• FBI Seizes 13 Sites Tied to China's Covert Effort to Hire US Officials
• Researchers tricked an OpenClaw AI agent into leaking AWS keys and customer data with a phishing email
• OpenAI Bans Chinese Accounts for Anti-AI Influence Campaigns

📰 Read the full edition on the site

FBI helps dismantle ransomware VPN, inside a North Korean hiring scam, CrowdStrike warns on China, and record Patch Tuesday.

Sources:

• Boston FBI Joins Takedown Of 'First VPN' Used By Ransomware
• I got inside a North Korean hiring scam. What I found reveals a troubling shift in tactics
• CrowdStrike Warns China Is Behind 58% Of State-Backed Cyber Attacks As Chinese and North Korean Hackers Hunt US AI Secrets
• Microsoft smashes record for biggest ever Patch Tuesday update | Computer Weekly
• New Veeam vulnerability exposes backup servers to RCE attacks

📰 Read the full edition on the site

Today's key security events: France's Tchap hacked, Russian GPS jamming, critical Check Point VPN flaw exploited, Microsoft repos compromised.

Sources:

• France’s ‘sovereign’ messenger Tchap was breached, and officials and the hacker disagree on how badly
• A 'massive escalation in electronic warfare': researchers show how Russian satellites can jam GPS across Europe — and a mysterious series of ‘interference events’ show it could already be happening
• Check Point VPN Flaw Exploited Since Early May
• For the 2nd time in weeks, Microsoft packages laced with credential stealer
• Microsoft Hacked to Deliver Malware to Claude and Gemini Users

📰 Read the full edition on the site