HeadFlash Security PL

Meta przejmuje red team AI, Sysdig dokumentuje autonomiczne ransomware, NSA przywraca TAO, a Chiny ostrzegają przed backdoorem w Claude Code.

Źródła:

• Meta Absorbs AI Security's Top Red Team as Autonomous Ransomware Arrives
• Microsoft patches RoguePlanet Defender zero-day vulnerability
• NSA revives 'Tailored Access Operations' name for elite hacking unit | The Record from Recorded Future News
• China Warns of Claude Code ‘Backdoor’ Security Risk
• IPsec Downgrade Attack Survives ML-KEM: Cloudflare Ships Authentication Fix

📰 Przeczytaj całe wydanie na stronie

Transsion szpieguje, GhostLock daje root w 5 sekund, Ubiquiti łatuje krytyczną lukę, wyciek 7 mln praw jazdy – oto najważniejsze wiadomości dnia.

Źródła:

• 1-in-2 phones sold in Africa exfiltrate telemetry to China - NowSecure
• Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack
• Ubiquiti Patches CVE-2026-50746, Maximum-Severity Flaw in UniFi… | DeafNews
• Google pays $250K for Linux vulnerability allowing guest VM escapes - Ars Technica
• This Massive Data Breach Compromised Nearly 7 Million Driver's Licenses

📰 Przeczytaj całe wydanie na stronie

Przypadkowy ransomware z DeepSeek, 16-letnia luka w Linux, wyciek z GitHub, postępy kwantowe i aresztowanie hakerów.

Źródła:

• DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born'
• New Januscape Linux flaw allows VM escape on Intel, AMD devices
• GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos - Noma Security
• Independent Labs Crack Google's Secret Cryptography Work
• Windows 11 identifier code used to track Scattered Spider perp after Microsoft shared info with FBI — 19-year-old US-Estonian hacker arrested over alleged ties to infamous extortion group | Tom's Hardware

📰 Przeczytaj całe wydanie na stronie

5 najważniejszych historii: zdalne wykonanie kodu w grze, oszustwa na Teams, śledzenie przez Windows i zmiany w kontraście botów.

Źródła:

• 2-Click Remote Code Execution in Meccha Chameleon
• Fake IT support calls on Microsoft Teams push EtherRAT malware
• A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID
• Microsoft says 'cryptographically relevant quantum computers could arrive sooner than previously expected' as it bumps its QSP timeline to 2029
• Cloudflare replaces its blanket AI bot block with granular controls for search, training, and agent crawlers

📰 Przeczytaj całe wydanie na stronie

NetNut rozbity, AI napędza ransomware i odkrywa błędy WebKit, Vect i TeamPCP łączą siły. Przegląd dnia.

Źródła:

• FBI and Google Disrupt NetNut Botnet That Rented 2 Million Home Devices to Spies
• Cyber experts issue alert after two ransomware groups team up on ‘unprecedented’ threat campaign
• Researchers say an AI agent just ran a ransomware attack from start to finish, with no human at the keyboard
• Apple Compresses Patch Cycle After AI Uncovers Four WebKit Flaws
• Amazon Q Vulnerability: Compromise via MCP Auto-Execution | Wiz Blog
• Seiko SkyBridge Enterprise IoT Routers Hit With Permanent OS Injection: No Fix
• North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
• 'Agentic coding tools have access to everything they need for this': Security experts warn Claude Code can be exploited simply by trying to be helpful
• Fake Mac Clipboard App Delivers New Password-Stealing Malware
• Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus - The Citizen Lab
• India Court Order Puts Your Domain Registration Data at Risk Worldwide
• How LLM-driven EDR evasion works | SpecterOps

📰 Przeczytaj całe wydanie na stronie

CISA ostrzega przed aktywnym exploitowaniem SharePoint; kanadyjski wywiad uderza w brokerów fentanylu; FIFA miała dziurę w World Cup; Google niszczy botnet NetNut; Opera blokuje ataki na schowek.

Źródła:

• CISA: Microsoft SharePoint RCE flaw now actively exploited
• Canada’s electronic spy agency conducted cyberattacks on criminals brokering fentanyl ingredients, report says - The Globe and Mail
• I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. | bobdahacker
• Google: This Proxy Service Is Using TV Streaming Devices to Host Cybercrime
• Opera now blocks one of the sneakiest malware tricks around

📰 Przeczytaj całe wydanie na stronie

HSIN zhakowany, aresztowanie członka Scattered Spider, kradzież schematów iPhone 18 Pro i kampania FortiBleed z ransomwarem Lynx.

Źródła:

• DHS confirms hackers breached HSIN info-sharing platform
• Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival | WIRED
• Office of Public Affairs | Alleged Member of Criminal Cyber Hacking Group „Scattered Spider” Arrested in Finland and Extradited to the United States | United States Department of Justice
• Hackers stole iPhone 18 Pro schematics from Apple supplier Tata
• FortiBleed credential-theft campaign linked to Lynx ransomware
• DHS confirms hackers breached HSIN info-sharing platform
• Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival | WIRED

📰 Przeczytaj całe wydanie na stronie

CitrixBleed, Gamaredon w akcji, Mustang Panda w Indii, SimpleHelp pod ostrzałem i BlueHammer w rękach ransomware.

Źródła:

• CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
• Russian Hackers Gamaredon Weaponize WinRAR Flaw for First Destructive Strike
• China-Linked Mustang Panda Hides Spy Tools Inside India's Trusted Cloud Storage App
• SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
• CISA: Windows BlueHammer flaw now exploited by ransomware gangs

📰 Przeczytaj całe wydanie na stronie

Microsoft usuwa 119 rozszerzeń z malwarem, Apple przyspiesza łatki przez AI, Sąd Najwyższy zmienia zasady geofencingu – oto najważniejsze historie dnia.

Źródła:

• Microsoft Removes 119 Edge Extensions Hiding… | DeafNews
• US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw - Infosecurity Magazine
• Apple accelerates security updates in response to AI-powered hacking risks
• Warner bill would create federally vetted list for secure, trustworthy AI agents
• Supreme Court Supports Privacy Protections for Cellphone Location Data

📰 Przeczytaj całe wydanie na stronie

Jaguar Land Rover padło ofiarą rosyjskich hakerów. FBI ściga grupy wynajmujące włamywaczy. DirtyClone zagraża kerneliom.

Źródła:

• Russian hackers were behind the Jaguar Land Rover attack that cost the British economy two and a half billion dollars
• Iranian national U.S. sought for $3.4 billion in hacking attacks arrested in Montenegro
• Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace
• GTA VI fans beware — experts warn 'a new wave of scam websites' is offering early access, but just stealing your bank details instead
• When cybercriminals hire burglars: Inside an alleged Russian effort to infiltrate multibillion-dollar US law firms
• Clone This Repo and I Own Your Machine | 0din.ai
• Polymarket Loses $3.1M to Frontend Vendor Hack While CFTC Investigation Deepens

📰 Przeczytaj całe wydanie na stronie