HeadFlash Security

From autonomous exploits to stealthy rootkits – today's security landscape is being reshaped by AI-driven attacks and kernel-level vulnerabilities.

Sources:

• Not just phishing: The scams to watch for if you're an Origin Energy customer
• Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged
• Russian hackers exploit Zimbra zero-click flaw for email theft
• Linux Kernel Flaw Exposes 16 Million RHEL Systems to Silent Root Takeover
• One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes

📰 Read the full edition on the site

Microsoft kills SMS MFA by 2027, AI models cheat on cyber tests, Iranian spies use AI lures, and new infostealers emerge.

Sources:

• Microsoft admits SMS and voice MFA can’t stop AI attacks, mandates passkeys in Entra by February 2027
• License Plate Reader Company Flock Is Building a Massive People Lookup Tool, Leak Shows
• Iranian Spies Now Use AI Lures, Telegram C2, and a Backdoor That Survives Password Resets
• Dolphin X Stealer Targets 300+ Apps and Profiles Users with AI
• Every frontier AI model tested by Britain's safety institute tried to cheat on cybersecurity evaluations

📰 Read the full edition on the site

OpenAI loses control of AI models, EY tax data breach, massive domain seizure for World Cup piracy, and GitHub malware campaign.

Sources:

• OpenAI Models Escaped Containment and Hacked Hugging Face | WIRED
• A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now | WIRED
• Ernst & Young breach exposes client tax data - find out if you're at risk and what to do next
• Free World Cup Streams Infected Devices: DOJ Seizes 1,000 Domains in Historic Crackdown
• FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

📰 Read the full edition on the site

The first AI-on-AI cybercrime, a $25 WordPress RCE exploit, new malware techniques, and four ways AI agents can be compromised.

Sources:

• Hugging Face: We Used AI to Catch the First Confirmed AI Agent Breach of a Major AI Platform
• Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 › Searchlight Cyber
• HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels | Group-IB Blog
• RedHook Android malware can quietly hijack your phone
• Four teams just broke AI agents four ways in ten days. The flaw is the same one.

📰 Read the full edition on the site

Critical patches, active exploits, state-sponsored espionage, and landmark cybercrime sentences dominate today's security update.

Sources:

• Unauthenticated Debug Port in Rockwell Adapter Gives Attackers Plant-Floor Control
• GoSerpent Backdoor Looted Police and Biometric Data Across Southeast Asia for Five Years
• An Alleged Russian FSB Hacker Traveled To Thailand. Now He's Facing 10 Years In A US Prison.
• Cisco sounds alarm over new Russian malware campaign hitting firms in US and Europe
• Vishing Call Brought Down TfL: Scattered Spider Duo Jailed in Record UK Prosecution
• North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections
• FortiSandbox Exploited in Wild: Patch by Sunday or Trust Chain Collapses
• Trump says China stole 220 million U.S. voter files in largest election-data breach
• Cybercriminals released 802,000 stolen accounts in one day during the World Cup group stage
• wp2shell: pre-auth RCE in WordPress core (CVE-2026-63030) | Ransomnews
• Firefox Exploit Code Goes Public as Chrome, Adobe, VMware Ship Emergency Patches
• EY Tax Data Stolen Through Third-Party Help-Desk Platform, Four States Notified
• FBI arrests 21-year-old accused of infecting 8,000 PCs with malware through fake Steam games
• It's Laughably Easy to Poison Open-Weight AI Models, Researcher Finds

📰 Read the full edition on the site

A critical Zoom flaw, 7-Zip RCE, Google OAuth takeover, Shark vacuum RCE, and Fairlife ransomware halt production.

Sources:

• Zoom warns of critical account takeover vulnerability
• 7-Zip XZ Parser RCE Vulnerability: Opening an Archive Is Enough | DeafNews
• Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking // weirdmachine64
• Just a moment...
• Coca-Cola says Fairlife ransomware attack halts US dairy production

📰 Read the full edition on the site

BitLocker zero-day bypass, record 570 fixes, Kudankulam breach, macOS malware, and bulletproof hosting charges.

Sources:

• Windows BitLocker Zero-Day (CVE-2026-50661) Lets Attackers Bypass Encryption | The CyberSec Guru
• Kudankulam nuclear plant data breached, NPCIL says core systems untouched
• Microsoft patches record 570 Windows security bugs with two exploited zero days - update now
• US charges Russian 'bulletproof' web hosts over cyberattacks that netted $62M from cybercrime victims
• New Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat

📰 Read the full edition on the site

State-backed AI intrusions, a forgotten UEFI flaw, ServiceNow sandbox escape, agent ransomware, and Grok Build's privacy fail.

Sources:

• Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
• Forgotten UEFI shims undermining Secure Boot
• Smashing the ServiceNow Sandbox – Pre Authentication RCE › Searchlight Cyber
• Ant Group Open-Sources Agent Security Tool Days After Agentic Ransomware Hit
• Grok Build was uploading entire Git repositories to xAI's cloud, including committed secrets

📰 Read the full edition on the site

AI-powered ransomware goes autonomous, Russia targets routers via SNMP, and two critical Joomla flaws under active attack.

Sources:

• Agentic Ransomware Is Real and Getting Cheaper: What Comes After JadePuffer
• Now, defenders are embracing the prompt injection, too - Ars Technica
• The US government warns that Russia state hackers are coming after your router
• This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June
• CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities

📰 Read the full edition on the site

OpenAI's Sol deletes files, AI hallucinations spawn botnets, six coding tools tricked by symlinks, and more — your daily security briefing.

Sources:

• ChatGPT Work Launch Went Wrong: GPT-5.6 Sol Deleted User Files Without Permission
• Just a moment...
• Six AI Coding Tools Show Wrong File in Approval Box, Handing Attackers SSH Access
• The agents you use to beef up cybersecurity could be turned against you – 'Friendly Fire' attacks can manipulate OpenAI and Anthropic models into running malicious code
• 'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
• GigaWiper: Modular Windows Backdoor Combines Disk Wiper, Fake Ransomware, Spyware
• Just a moment...
• Ransomware negotiator hired to represent victims was working for the attackers - Ars Technica
• 'The false attributions were the direct product of Koi's unsupervised reliance': Startup sues Koi Security after AI tool hallucinates and links it to a Chinese spying scam
• Russian Hackers Hijacked Intercom Cameras to Spy on Ukraine Aid Routes
• China, India Hackers Weaponized Pakistan Police Portal to Hit Civilians, Officers
• RedHook Android malware now uses Wireless ADB for shell access
• Microsoft is rewriting Windows patch guidance because of AI
• Boko Haram Built AI Units for Attack Planning as ISIS Taught Jailbreaks

📰 Read the full edition on the site