HeadFlash Security

Cisco patches a maximum-severity ISE authentication bypass under active attack as CISA orders federal agencies to fix it within three days.

Sources:

• Cisco warns of max severity ISE zero-day exploited in attacks
• PhantomFix: a fabricated bug that hijacks an AI autofix agent (CVE-2026-90999)
• China's FamousSparrow APT Spies on US Politics in Latin America
• Malicious JavaScript Evaded VirusTotal in Seven of Eight E-Commerce Storefront Attacks
• Bug Hunters Used Claude to Hack OpenAI

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

FBI disrupts Russian assassination network, Iranian CHOSEN BRICK malware spreads, and a Parallels bug hands root to any local process on macOS.

Sources:

• FBI disrupts Russian plot to carry out targeted killings on US soil, indictment says
• Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
• Malware bypasses browser checks to force install Chrome, Edge extensions
• Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works | WIRED
• A Quote in a Folder Name Opens Root on Mac: The Parallels Bug | DeafNews

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Cisco Secure Email Gateway zero-day under attack, ConnectWise patches worm-exploited ScreenConnect flaw, and a Redis botnet hit 3,562 servers.

Sources:

• Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation - SecurityWeek
• ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks - SecurityWeek
• Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files
• Cyber Op Targets South Korean Media & Automotive Sectors
• Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution - Rhino Security Labs

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

A maximum-severity GitLab bug is already being exploited to steal CI/CD secrets, while ShinyHunters dumps 594,701 Florida DMV files.

Sources:

• Maximum Severity GitLab Flaw Puts Supply Chains at Risk
• Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
• Ransomware gang leaks more than half a million files after Florida DMV hack
• Former Forensic Analyst Sentenced To 10 Years For DNA Manipulation
• National Security Agency plans major internal restructuring: report

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Cisco Talos ties three attacker clusters to two FMC flaws, one rated CVSS 10.0, as CISA sets a September 12 federal patch deadline.

Sources:

• Cisco Firewall Manager Hacked by Sandworm Espionage Implant and Qilin Ransomware
• OpenAI agents attacked software service RubyGems before Hugging Face hack
• Passkey-themed phishing attacks lead to Microsoft 365 data theft
• 153 million driver's license scans may be on the dark web
• Google Leaked Sex Crime Victims' Data Beyond Korea
• Conti ransomware gang member sentenced to 4 years in prison
• Code Hidden In 'White-Labeled' Routers Gives Chinese Servers Full Control
• Thousands of hacked sites trick you into installing malware
• ClickFix attacks infecting PCs and Macs are going viral
• Revolut confirms customer data breach through fake government requests
• North Korea is paying people $500 a month in Nigeria, South Africa, India and Iran to help fake workers get jobs inside US companies
• Hackers exploit Tencent app flaw to deploy GrayRabbit malware
• Russian Hackers Used Claude AI to Target Ukraine
• Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you'd hoped for

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Microsoft's biggest Patch Tuesday ever fixes 974 flaws, two already under attack, as ransomware hits WatchGuard and BlueMoon exploits Windows and Chrome.

Sources:

• Microsoft patches a record 974 flaws, and two are already under attack
• CISA: WatchGuard RCE flaw now exploited in ransomware attacks
• New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
• Researchers used AI to build a WeChat worm that spreads through phone calls
• LG TVs Caught Secretly Recording Users and Scanning Their Homes For Other Devices, Even When Disconnected From the Internet

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Reverse-engineered Stuxnet hits GitHub, a hash-identical npm worm bypasses publish-time scanning, and India's FRI blocks ₹5,043 crore in fraud.

Sources:

• Researcher reverse-engineers infamous Stuxnet malware source code, publishes it on Github for all — attack targeted Iranian nuclear facilities and was the first software of its type to cause physical damage
• Is Shai-Hulud back? Researchers spot 'wormy boy' slipping past npm malware scanning features
• Researchers find a hole in Microsoft's anti-spoofing fix
• ₹5043 crore saved: How India is building a real-time defence against digital fraud
• Russian hackers may have used fake CAPTCHA to hack Ukrainian government computers

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Sophos uncovers a second-stage rootkit on F5 BIG-IP APM systems, injecting web shells into memory and evading detection.

Sources:

• Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit
• Chinese Hackers Use AI On Stolen Networks To Speed Up Attacks
• North Korea Trojanized HAProxy in South Korea, Turning SSL Termination Into Wiretap
• UAE calls for ‘Cyber Geneva Convention’ to treat major cyberattacks as acts of war
• Tech company discloses first-of-its-kind A.I. cyberattack against a government

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Google patches exploited Chrome bug, plus MFA-bypassing phishing, Magento backdoor, ScreenConnect flaw, and ASCII smuggling attacks.

Sources:

• Google issues emergency update for Chrome after unknown bug detected
• BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
• Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
• ConnectWise warns of new ScreenConnect flaw without patch
• Cyber criminals are adapting ASCII smuggling for mass phishing campaigns

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Citizen Lab confirms Serbia hit student activists with Pegasus zero-click; Apple patches iOS 18.4.1 as 14 targets documented.

Sources:

• Serbia Used Pegasus Zero-Click Exploit on Student Activists; iOS 18.4.1 Patches It
• Darknavy Claims It Cracked the Starlink Terminal After SpaceX Hardened It
• 67,000 More Trezor Customers Exposed as Data Breach Widens
• CISA Cuts Six Free Cyber Assessments Utilities and Hospitals Cannot Afford to Replace
• New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
• Berlin cyberattack: hackers leak highly sensitive data across dark web
• US military disables ad trackers amid concerns over troops’ safety
• OpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosure
• US AI startup micro1 to top Google bid for Spirit data
• An AI hacking trick is now being used to split the word ‘funding’ in spam
• FBI launches investigation into theft of millions of Americans’ and Canadians’ stolen driver’s licenses
• Winona paid $128K ransom after January cyberattack
• Germany plans anti-sabotage shield after airport drone attack, Bild reports
• Should you use a separate computer for online banking?

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.