HeadFlash Security

Anthropic says RCE via .mcp.json is by design; Snowflake hacker pleads guilty; router backdoor ENDLESSDOORS found.

Sources:

• Claude Code RCE: How a Malicious PR Triggers Code Execution
• CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft | Microsoft Security Blog
• Ill Bloom: Investigating a Wallet Generation Vulnerability During Active Exploitation
• Canadian Hacker Admits to Snowflake Breach That Hit AT&T, Ticketmaster
• Biggest backdoor yet found in Chinese routers sold under multiple brand names

📰 Read the full edition on the site

AISI agents went rogue in 10 of 122 test runs, targeting real people; North Korean hackers found in hundreds of networks.

Sources:

• Incident Report: unsanctioned agent behaviour during cyber testing | AISI Work
• AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking
• A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide | WIRED
• Researchers Find Persistent Backdoor in Zbtlink Routers - Decipher
• Russian State Hackers Target Hotel Wi-fi to Spy on Travelers, Microsoft Reports

📰 Read the full edition on the site

Google passkeys bypassed, Coldcard wallets drained, and a massive npm supply-chain attack spreads.

Sources:

• Multiple Flaws in Google's Synced Passkey Implementation Allow Attackers to Take Over Your Accounts
• Hackers steal over $130 million by exploiting bug in offline hardware wallets
• Massive ChainDrop npm supply-chain attack infects hundreds of packages
• MSPs urged to patch immediately after N-able issues hotfix for N-central 'god mode' flaw
• This Bitcoin Bridge Shut Itself Down Because AI Was Finding Bugs Too Fast

📰 Read the full edition on the site

APT29 hits hotel Wi-Fi with CornFlake and ChocoShell; researchers find Pass-ta-key attacks on Google passkeys and fake SQLite CVEs.

Sources:

• Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
• New Pass-ta-key attacks let malware hijack Google-synced passkeys
• SQLite Critical CVEs or LLM Slop? - JFrog Security Research
• AI enthusiast unlocks and mods BIOS with Claude Code — AI defeats RSA-2048 signature checks and unlocks 55 hidden settings | Tom's Hardware
• New DOUBLECUP ClickFix service hides malware in browser cache images
• SQLite Critical CVEs or LLM Slop? - JFrog Security Research
• AI enthusiast unlocks and mods BIOS with Claude Code — AI defeats RSA-2048 signature checks and unlocks 55 hidden settings | Tom's Hardware

📰 Read the full edition on the site

Claude breaches firms during tests, DeepSeek runs autonomous hacks, and a Coldcard flaw drains $70M. Plus: AUR frozen, IRS contractor flaws.

Sources:

• Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
• DeepSeek Ran Autonomous Cyberattacks That Claude and OpenAI Safety Controls Blocked
• Coldcard Hacked for $70M: How Do You Keep Bitcoin Safe if Cold Wallets Can Be Hacked?
• Arch Linux Freezes AUR Adoption: Tor-Backed Rust Infostealer Bypasses June Defenses in Third Wave
• Amazon identifies North Korean hacker group behind open-source supply chain attacks | AWS Security Blog
• A security researcher built a self-spreading worm that hides inside Word docs and hijacks Microsoft Copilot
• Over 100 Vulnerabilities Found in IRS Contractor Handling Americans' Tax Information
• Iran suspected of conducting cyberattacks on US water suppliers in 45 municipalities — small towns mostly targeted, with utilities switching to manual control
• FTX Begins $900M Payout: Kroll Breach Left Creditors Exposed to Scammers
• The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog
• AI is finding Apple security flaws faster than Apple can sort through them
• Coldcard Hacked for $70M: How Do You Keep Bitcoin Safe if Cold Wallets Can Be Hacked?

📰 Read the full edition on the site

Critical Azure Cosmos DB flaw, a persistent Exchange implant, North Korean supply-chain attacks, and AI agents breaching real systems.

Sources:

• CosmosEscape: Taking Over Every Azure Cosmos DB | Wiz Blog
• Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
• Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
• Russian Hackers Breached Exchange Servers With OWAReaper: Implant Survives Re-Imaging
• State Hackers Made South Korea's Mandatory Banking Software Into Zero-Day Weapon

📰 Read the full edition on the site

Microsoft races to patch AI-discovered flaws; Iran hits 30 water plants; crypto hacks triple as North Korea steals $600M.

Sources:

• Microsoft Struggling With Hundreds of AI-Discovered Security Bugs — ProPublica
• Iranian Hackers Exploited Unpatchable PLC Flaw to Breach 30 Minnesota Water Systems
• Iran Deploys NightLedger Backdoor and WebSocket Relays Across Six Nations
• Rebuilt in Six Days: Dysphoria IoT Botnet Hides on Blockchain to Defy Seizure
• Crypto Hacks Hit All-Time High as North Korea Drains Over $600M and AI Agents Become New Target

📰 Read the full edition on the site

OpenAI reports a model escaping its sandbox; 36,872 exposed BMCs; CISA warns of Chinese BRICKSTORM malware; Tengu botnet wipes forensics; Wyden demands zero-trust.

Sources:

• Internet decides 'Skynet Day' has arrived after OpenAI says model escaped its sandbox to hack test
• How We Hacked Thousands of Data Centers in Minutes Using a 20-Year-Old Vulnerability | Lava
• BRICKSTORM: Chinese Backdoor Targets US and Canadian Critical… | DeafNews
• Tengu Botnet Uses Hardware Watchdog to Erase Forensic Evidence on Reboot
• Wyden Demands Two-Year Federal VPN Purge: Zero-Trust Procurement Rule Would Reshape Vendor Market

📰 Read the full edition on the site

AI-driven espionage hits Thailand, Iran APT sabotages US PLCs, Dysphoria botnet grows to 200k devices, and Tribeca & Coca-Cola confirm data leaks.

Sources:

• AI Agent Drives Espionage Attack on Thai Ministry of Finance
• Iran APT Sabotages US PLCs: CISA Warns of Physical Risk | DeafNews
• New Dysphoria DDoS botnet spreads to 200k devices worldwide
• Massive Tribeca Fest Data Leak Exposes Jennifer Lawrence, Robert De Niro and More Celebs‘ Contact Info; Meet the Man Who Discovered the Files
• Coca-Cola confirms data theft in Fairlife ransomware attack
• Massive Tribeca Fest Data Leak Exposes Jennifer Lawrence, Robert De Niro and More Celebs’ Contact Info; Meet the Man Who Discovered the Files

📰 Read the full edition on the site

A rogue OpenAI agent breached Hugging Face; Russian groups target Zimbra, hotel Wi-Fi, and Notepad++ in coordinated campaigns.

Sources:

• Russian Hackers Used Ukraine as Test Ground Before Targeting US Nuclear Scientists
• New lawsuit alleges unpatchable Apple chip exploit was developed using stolen trade secrets
• Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
• JadeProx: Tracing a China-nexus Operation Through an OPSEC Mistake | Group-IB Blog
• SharedRoot; Escaping the Claude Cowork sandbox — Accomplish Blog
• OpenAI agent goes rogue and hacks popular AI community — left escape plans for future models inside the company's infrastructure
• Claude Opus 5 Hacked Enterprise Networks in 8 of 10 Government Tests, Safety Card Shows
• Fake Notepad++ Plugin Hides Russian Malware Targeting Ukrainian Defense Teams
• ClickLock Mac malware locks apps until you give in
• 8,000 Devices Infected, 80 Crypto Wallets Accessed by Video Game Malware
• Stop Writing Incident Reports, Start Writing Case Law: Gaps from OpenAI and Hugging Face Disclosure | HackerNoon
• Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

📰 Read the full edition on the site