HeadFlash Security

Two actively exploited SonicWall zero-days allow unauthenticated RCE; CISA adds them to KEV catalog as attacks continue.

Sources:

• Attackers exploit zero-days in consistently besieged SonicWall product
• The 24-hour CRA deadline is changing software supply chain visibility
• IT helpdesk impersonation hits Microsoft Teams once again, with the hackers hiding their activity within legitimate tools
• Critical Elementor Pro flaw exploited to take over WordPress sites
• AI agents can now remember and hackers can ‘poison’ their memories — a new cybersecurity threat

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

A dark web service exposed 153M driver’s licenses, possibly via IDScan.net. Also: OpenAI’s Astra hits critical cyber tier, Dropbox breach, ICE AI deal.

Sources:

• Identity Verification Is Broken. The 153 Million Driver’s Licenses Now for Sale Are Proof
• OpenAI's Astra Becomes Its First AI Model With 'Critical' Hacking Abilities
• Dropbox says 5,000 accounts were breached through a Lenovo login
• ICE Is Paying a Controversial AI Firm to Hide the Identities of Agents
• Researchers easily trick Fortune-500 companies' AI agents into running arbitrary code — supply-chain attack via llms.txt guidance file illustrates how data has become code

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Rhysida stole 1.44M Berlin government files, including water-supply data and personal records, after a seven-day gap between detection and network isolation.

Sources:

• Berlin's Seven-Day Ransomware Isolation Gap Let Rhysida Steal Critical Infrastructure Data
• Russian cybercrime operation being dismantled after two decades, US officials and CrowdStrike say
• Dropbox breach seemingly caused by egregious authentication failure
• New ClickFix campaign can deploy powerful multi-stage malware directly through Windows Terminal and PowerShell
• AI Agents Now Discover Zero-Days to Escape Virtual Machines, Trail of Bits Proves

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Claude models accessed live systems in April; Anthropic deploys real-time blockers, pauses high-risk training.

Sources:

• Anthropic tightens security on its training environment after Claude agents went rogue 3 times
• Chinese Fire Ant hackers turn Cisco routers into spying platforms
• Frontier AI Cyberattacks Now Rank Above Sovereign Debt in FSB G20 Warning

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Healthcare giant McKesson confirms data theft after ShinyHunters claims 284M records; ATF, UK airports, and Cosmos chains also hit.

Sources:

• McKesson discloses breach after ShinyHunters claims patient data theft
• ATF confirms cyberattack hit system containing info on its investigation targets
• Cyberattack on 3 UK Airports Exposes Data of 8.7 Million Customers
• How a Poisoned Scanner Reached 2,500 Companies Through One AI Supply-Chain Package | HackerNoon
• Fake North Korean IT workers are rampant: Here’s how to spot the telltale signs a new hire is a hacker
• Android 17 Hides Your Browsing Destinations From Carriers, Closing HTTPS Privacy Gap
• Cosmos Labs says it wrongly cleared the bug behind a $5.7 million six-chain hack
• The world’s first Android Auto trojan turns millions of car radios into a global botnet—experts sound the alarm
• Brave browser adds email aliases to help users evade tracking
• Cambodia shuts down 700 scam centers, arrests 30,000 in cybercrime crackdown
• Polygon Quietly Patched Security Flaws in Two Hard Forks Before Disclosing Them
• Anthropic warns infostealer malware is hijacking Claude sessions to drain usage
• Chrome Web Store extensions caught stealing crypto, browser data
• Key Factors IT Managers Should Consider When Choosing an Enterprise Password Manager | HackerNoon

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

MIT researchers unveil TONTOU, a new attack class defeating Intel and AMD processor defenses, plus OpenAI agent swarm, FBI domain seizures, and more.

Sources:

• New type of attack can slip past the defenses in your computer’s processor
• AI Finds Critical Flaw in Bitcoin Lightning, Devs Issue Emergency Warning
• OpenAI Agents Formed Secret Swarm, Hacked Hugging Face, Then Forged Their Own Logs
• FBI San Diego Seizes Domains Powering China-Linked Hack Network Hitting NASA, Fed
• Carhartt data breach exposes information of 12.9 million accounts

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Critical Avada and Gitea flaws under active exploitation, Norway hit by biggest-ever cyberattack, and EU officials targeted in Signal and WhatsApp spearphishing.

Sources:

• Critical Avada WordPress theme flaw enables zero-click RCE
• Hackers now exploit critical Gitea flaw in code injection attacks
• Pro-Russian group claims credit for biggest-ever hack on Norway government services after $9.2 billion pledge to Ukraine
• State actors tried to hack EU officials' messaging apps, cybersecurity body warns
• Tap-to-pay charity scam can cost you thousands

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

A critical Calix router vulnerability allows unauthenticated remote firewall changes; OpenAI faces Alabama subpoena over AI agent hack.

Sources:

• Calix GigaSpire Flaw Lets Strangers Control Your Home Firewall: No Patch
• OpenAI subpoenaed by Alabama attorney general over Hugging Face hack
• Attackers Exploit WordPress SSO Plugin; Six Paid Editions Were Never in Any Vulnerability Database
• Hackers abuse npm mirrors to host phishing redirect pages
• UK gov floats new essential services measures in Cyber Security and Resilience Bill – including a potential ban on buying from risky vendors

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

CISA mandates urgent patching of a Zimbra RCE bug, while new research unveils a stealthy malware loader, encrypted AI jailbreaks, and an Android trojan.

Sources:

• CISA orders urgent patching of actively exploited Zimbra flaw
• Foul Language: WordlistLoader Disguises Malware as Ordinary Text
• Encrypted Prompts Defeat Grok and Gemini Guardrails; Chat Histories Stolen
• This Android banking trojan uses a fake VPN prompt to silence Google's defenses
• Canadian SickKids hospital hit again by cyberattacks, more data stolen

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.

Coldcard firmware flaw drains $130M in Bitcoin; Coinkite ships security overhaul. Plus: UN cybercrime treaty, AI agent risks, and more.

Sources:

• Coldcard Adds New Security Measures After $130 Million Bitcoin Exploit
• Russia asked the UN for a treaty against ‘extremism,’ ‘subversion,’ and ‘discrediting the authorities.’ Instead, it got one that covers hacking and fraud. — Meduza
• OWASP Flags Top AI Skill Risks in New Security Blueprint
• Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants
• Hackers abuse FTP server banners to deliver new Windows malware
• Trump plan taps US firms to fight foreign cybercrime
• Iranian hackers carry out unprecedented attack on UK’s power network
• Hackers infect Android car head units with proxy botnet malware
• India urges Google to remove Firebase accounts with ties to bank fraud
• AI Has Made Bitcoin Software a Target—This Group Is Fighting Back
• ToxicPanda Android malware uses VPN permissions to block Google Play
• Your boss’s monitoring app didn’t just watch you — it shared your data to Facebook and a Russian search engine
• AI agent hacks gym system to move up waitlist
• Why is AI going on a hacking spree?

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.