CISA potwierdza exploitację krytycznych luk w FortiSandbox, WordPress łata RCE bez uwierzytelnienia, a hakerzy kradną dane EY i 10 mln pasażerów londyńskiego metra.

Źródła:

• FortiSandbox Exploited in Wild: Patch by Sunday or Trust Chain Collapses
• wp2shell: pre-auth RCE in WordPress core (CVE-2026-63030) | Ransomnews
• EY Tax Data Stolen Through Third-Party Help-Desk Platform, Four States Notified
• Vishing Call Brought Down TfL: Scattered Spider Duo Jailed in Record UK Prosecution
• GoSerpent Backdoor Looted Police and Biometric Data Across Southeast Asia for Five Years
• An Alleged Russian FSB Hacker Traveled To Thailand. Now He's Facing 10 Years In A US Prison.
• Cisco sounds alarm over new Russian malware campaign hitting firms in US and Europe
• North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections
• Unauthenticated Debug Port in Rockwell Adapter Gives Attackers Plant-Floor Control
• Trump says China stole 220 million U.S. voter files in largest election-data breach
• Cybercriminals released 802,000 stolen accounts in one day during the World Cup group stage
• Firefox Exploit Code Goes Public as Chrome, Adobe, VMware Ship Emergency Patches
• FBI arrests 21-year-old accused of infecting 8,000 PCs with malware through fake Steam games
• It's Laughably Easy to Poison Open-Weight AI Models, Researcher Finds

📰 Przeczytaj całe wydanie na stronie

Zoom łatuje podatność 9.8, 7-Zip bez fixa na RCE, Google naprawia przejęcie konta, a SharkNinja ignoruje dziurę w milionach robotów.

Źródła:

• Zoom warns of critical account takeover vulnerability
• 7-Zip XZ Parser RCE Vulnerability: Opening an Archive Is Enough | DeafNews
• Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking // weirdmachine64
• Just a moment...
• Coca-Cola says Fairlife ransomware attack halts US dairy production

📰 Przeczytaj całe wydanie na stronie

Microsoft łata BitLocker, rekord 570 błędów, oskarżenia o rosyjskie hostingi i nowe macOS malware.

Źródła:

• Windows BitLocker Zero-Day (CVE-2026-50661) Lets Attackers Bypass Encryption | The CyberSec Guru
• Microsoft patches record 570 Windows security bugs with two exploited zero days - update now
• Kudankulam nuclear plant data breached, NPCIL says core systems untouched
• US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims
• New Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat

📰 Przeczytaj całe wydanie na stronie

TencShell z AI, 11 zapomnianych shimów UEFI, pre-auth RCE w ServiceNow, agentowy ransomware i Grok Build wysyła całe repo.

Źródła:

• Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
• Forgotten UEFI shims undermining Secure Boot
• Smashing the ServiceNow Sandbox – Pre Authentication RCE › Searchlight Cyber
• Ant Group Open-Sources Agent Security Tool Days After Agentic Ransomware Hit
• Grok Build was uploading entire Git repositories to xAI’s cloud, including committed secrets
• Forgotten UEFI shims undermining Secure Boot

📰 Przeczytaj całe wydanie na stronie

Codzienny przegląd bezpieczeństwa: autonomiczne ransomware, obrona przez wstrzykiwanie promptów, ostrzeżenie o routerach i nowy lider ransomware.

Źródła:

• Agentic Ransomware Is Real and Getting Cheaper: What Comes After JadePuffer
• Now, defenders are embracing the prompt injection, too - Ars Technica
• The US government warns that Russia state hackers are coming after your router
• This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June
• CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities

📰 Przeczytaj całe wydanie na stronie

HalluSquatting, GhostApproval, Sol usuwający pliki – dziś w HeadFlash przegląd najważniejszych wydarzeń z frontu bezpieczeństwa.

Źródła:

• Just a moment...
• Just a moment...
• GigaWiper: Modular Windows Backdoor Combines Disk Wiper, Fake Ransomware, Spyware
• The agents you use to beef up cybersecurity could be turned against you – 'Friendly Fire' attacks can manipulate OpenAI and Anthropic models into running malicious code
• Six AI Coding Tools Show Wrong File in Approval Box, Handing Attackers SSH Access
• Ransomware negotiator hired to represent victims was working for the attackers - Ars Technica
• 'The false attributions were the direct product of Koi's unsupervised reliance': Startup sues Koi Security after AI tool hallucinates and links it to a Chinese spying scam
• 'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
• Russian Hackers Hijacked Intercom Cameras to Spy on Ukraine Aid Routes
• China, India Hackers Weaponized Pakistan Police Portal to Hit Civilians, Officers
• RedHook Android malware now uses Wireless ADB for shell access
• Microsoft is rewriting Windows patch guidance because of AI - Help Net Security
• Boko Haram Built AI Units for Attack Planning as ISIS Taught Jailbreaks
• ChatGPT Work Launch Went Wrong: GPT-5.6 Sol Deleted User Files Without Permission

📰 Przeczytaj całe wydanie na stronie

Meta przejmuje red team AI, Sysdig dokumentuje autonomiczne ransomware, NSA przywraca TAO, a Chiny ostrzegają przed backdoorem w Claude Code.

Źródła:

• Meta Absorbs AI Security's Top Red Team as Autonomous Ransomware Arrives
• Microsoft patches RoguePlanet Defender zero-day vulnerability
• NSA revives 'Tailored Access Operations' name for elite hacking unit | The Record from Recorded Future News
• China Warns of Claude Code ‘Backdoor’ Security Risk
• IPsec Downgrade Attack Survives ML-KEM: Cloudflare Ships Authentication Fix

📰 Przeczytaj całe wydanie na stronie

Transsion szpieguje, GhostLock daje root w 5 sekund, Ubiquiti łatuje krytyczną lukę, wyciek 7 mln praw jazdy – oto najważniejsze wiadomości dnia.

Źródła:

• 1-in-2 phones sold in Africa exfiltrate telemetry to China - NowSecure
• Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack
• Ubiquiti Patches CVE-2026-50746, Maximum-Severity Flaw in UniFi… | DeafNews
• Google pays $250K for Linux vulnerability allowing guest VM escapes - Ars Technica
• This Massive Data Breach Compromised Nearly 7 Million Driver's Licenses

📰 Przeczytaj całe wydanie na stronie

Przypadkowy ransomware z DeepSeek, 16-letnia luka w Linux, wyciek z GitHub, postępy kwantowe i aresztowanie hakerów.

Źródła:

• DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born'
• New Januscape Linux flaw allows VM escape on Intel, AMD devices
• GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos - Noma Security
• Independent Labs Crack Google's Secret Cryptography Work
• Windows 11 identifier code used to track Scattered Spider perp after Microsoft shared info with FBI — 19-year-old US-Estonian hacker arrested over alleged ties to infamous extortion group | Tom's Hardware

📰 Przeczytaj całe wydanie na stronie

5 najważniejszych historii: zdalne wykonanie kodu w grze, oszustwa na Teams, śledzenie przez Windows i zmiany w kontraście botów.

Źródła:

• 2-Click Remote Code Execution in Meccha Chameleon
• Fake IT support calls on Microsoft Teams push EtherRAT malware
• A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID
• Microsoft says 'cryptographically relevant quantum computers could arrive sooner than previously expected' as it bumps its QSP timeline to 2029
• Cloudflare replaces its blanket AI bot block with granular controls for search, training, and agent crawlers

📰 Przeczytaj całe wydanie na stronie