A critical Zoom flaw, 7-Zip RCE, Google OAuth takeover, Shark vacuum RCE, and Fairlife ransomware halt production.

Sources:

• Zoom warns of critical account takeover vulnerability
• 7-Zip XZ Parser RCE Vulnerability: Opening an Archive Is Enough | DeafNews
• Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking // weirdmachine64
• Just a moment...
• Coca-Cola says Fairlife ransomware attack halts US dairy production

📰 Read the full edition on the site

BitLocker zero-day bypass, record 570 fixes, Kudankulam breach, macOS malware, and bulletproof hosting charges.

Sources:

• Windows BitLocker Zero-Day (CVE-2026-50661) Lets Attackers Bypass Encryption | The CyberSec Guru
• Kudankulam nuclear plant data breached, NPCIL says core systems untouched
• Microsoft patches record 570 Windows security bugs with two exploited zero days - update now
• US charges Russian 'bulletproof' web hosts over cyberattacks that netted $62M from cybercrime victims
• New Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat

📰 Read the full edition on the site

State-backed AI intrusions, a forgotten UEFI flaw, ServiceNow sandbox escape, agent ransomware, and Grok Build's privacy fail.

Sources:

• Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
• Forgotten UEFI shims undermining Secure Boot
• Smashing the ServiceNow Sandbox – Pre Authentication RCE › Searchlight Cyber
• Ant Group Open-Sources Agent Security Tool Days After Agentic Ransomware Hit
• Grok Build was uploading entire Git repositories to xAI's cloud, including committed secrets

📰 Read the full edition on the site

AI-powered ransomware goes autonomous, Russia targets routers via SNMP, and two critical Joomla flaws under active attack.

Sources:

• Agentic Ransomware Is Real and Getting Cheaper: What Comes After JadePuffer
• Now, defenders are embracing the prompt injection, too - Ars Technica
• The US government warns that Russia state hackers are coming after your router
• This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June
• CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities

📰 Read the full edition on the site

OpenAI's Sol deletes files, AI hallucinations spawn botnets, six coding tools tricked by symlinks, and more — your daily security briefing.

Sources:

• ChatGPT Work Launch Went Wrong: GPT-5.6 Sol Deleted User Files Without Permission
• Just a moment...
• Six AI Coding Tools Show Wrong File in Approval Box, Handing Attackers SSH Access
• The agents you use to beef up cybersecurity could be turned against you – 'Friendly Fire' attacks can manipulate OpenAI and Anthropic models into running malicious code
• 'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
• GigaWiper: Modular Windows Backdoor Combines Disk Wiper, Fake Ransomware, Spyware
• Just a moment...
• Ransomware negotiator hired to represent victims was working for the attackers - Ars Technica
• 'The false attributions were the direct product of Koi's unsupervised reliance': Startup sues Koi Security after AI tool hallucinates and links it to a Chinese spying scam
• Russian Hackers Hijacked Intercom Cameras to Spy on Ukraine Aid Routes
• China, India Hackers Weaponized Pakistan Police Portal to Hit Civilians, Officers
• RedHook Android malware now uses Wireless ADB for shell access
• Microsoft is rewriting Windows patch guidance because of AI
• Boko Haram Built AI Units for Attack Planning as ISIS Taught Jailbreaks

📰 Read the full edition on the site

Meta absorbs Virtue AI's red team; first fully autonomous ransomware spotted; NSA reboots TAO; Cloudflare fixes IPsec downgrade; China warns on Claude Code.

Sources:

• Meta Absorbs AI Security's Top Red Team as Autonomous Ransomware Arrives
• Microsoft patches RoguePlanet Defender zero-day vulnerability
• NSA revives 'Tailored Access Operations' name for elite hacking unit | The Record from Recorded Future News
• IPsec Downgrade Attack Survives ML-KEM: Cloudflare Ships Authentication Fix
• China Warns of Claude Code 'Backdoor' Security Risk

📰 Read the full edition on the site

One-in-two phones in Africa send telemetry to China; Linux kernel flaws enable guest escape and 5-second root; Ubiquiti critical patch; 7M driver licenses exposed.

Sources:

• 1-in-2 phones sold in Africa exfiltrate telemetry to China - NowSecure
• Google pays $250K for Linux vulnerability allowing guest VM escapes - Ars Technica
• Ubiquiti Patches CVE-2026-50746, Maximum-Severity Flaw in UniFi… | DeafNews
• Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack
• This Massive Data Breach Compromised Nearly 7 Million Driver's Licenses

📰 Read the full edition on the site

DeepSeek accidentally creates ransomware, a 16-year-old Linux flaw enables VM escape, and quantum circuits break ECC faster than Google.

Sources:

• DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born'
• New Januscape Linux flaw allows VM escape on Intel, AMD devices
• GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos - Noma Security
• Independent Labs Crack Google's Secret Cryptography Work
• Windows 11 identifier code used to track Scattered Spider perp after Microsoft shared info with FBI — 19-year-old US-Estonian hacker arrested over alleged ties to infamous extortion group | Tom's Hardware

📰 Read the full edition on the site

Microsoft pushes quantum readiness to 2029, Teams phishing drops EtherRAT, and a hacker arrest reveals Windows' persistent device ID.

Sources:

• 2-Click Remote Code Execution in Meccha Chameleon
• Fake IT support calls on Microsoft Teams push EtherRAT malware
• A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID
• Microsoft says 'cryptographically relevant quantum computers could arrive sooner than previously expected' as it bumps its QSP timeline to 2029
• Cloudflare replaces its blanket AI bot block with granular controls for search, training, and agent crawlers

📰 Read the full edition on the site

FBI and Google dismantle NetNut botnet; AI agent runs first fully autonomous ransomware; Apple accelerates patches after AI finds WebKit flaws.

Sources:

• Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus - The Citizen Lab
• FBI and Google Disrupt NetNut Botnet That Rented 2 Million Home Devices to Spies
• North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
• Cyber experts issue alert after two ransomware groups team up on 'unprecedented' threat campaign
• Researchers say an AI agent just ran a ransomware attack from start to finish, with no human at the keyboard
• How LLM-driven EDR evasion works | SpecterOps
• Amazon Q Vulnerability: Compromise via MCP Auto-Execution | Wiz Blog
• Seiko SkyBridge Enterprise IoT Routers Hit With Permanent OS Injection: No Fix
• Apple Compresses Patch Cycle After AI Uncovers Four WebKit Flaws | DeafNews
• 'Agentic coding tools have access to everything they need for this': Security experts warn Claude Code can be exploited simply by trying to be helpful
• Fake Mac Clipboard App Delivers New Password-Stealing Malware
• India Court Order Puts Your Domain Registration Data at Risk Worldwide

📰 Read the full edition on the site