NetNut rozbity, AI napędza ransomware i odkrywa błędy WebKit, Vect i TeamPCP łączą siły. Przegląd dnia.

Źródła:

• FBI and Google Disrupt NetNut Botnet That Rented 2 Million Home Devices to Spies
• Cyber experts issue alert after two ransomware groups team up on ‘unprecedented’ threat campaign
• Researchers say an AI agent just ran a ransomware attack from start to finish, with no human at the keyboard
• Apple Compresses Patch Cycle After AI Uncovers Four WebKit Flaws
• Amazon Q Vulnerability: Compromise via MCP Auto-Execution | Wiz Blog
• Seiko SkyBridge Enterprise IoT Routers Hit With Permanent OS Injection: No Fix
• North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
• 'Agentic coding tools have access to everything they need for this': Security experts warn Claude Code can be exploited simply by trying to be helpful
• Fake Mac Clipboard App Delivers New Password-Stealing Malware
• Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus - The Citizen Lab
• India Court Order Puts Your Domain Registration Data at Risk Worldwide
• How LLM-driven EDR evasion works | SpecterOps

📰 Przeczytaj całe wydanie na stronie

CISA ostrzega przed aktywnym exploitowaniem SharePoint; kanadyjski wywiad uderza w brokerów fentanylu; FIFA miała dziurę w World Cup; Google niszczy botnet NetNut; Opera blokuje ataki na schowek.

Źródła:

• CISA: Microsoft SharePoint RCE flaw now actively exploited
• Canada’s electronic spy agency conducted cyberattacks on criminals brokering fentanyl ingredients, report says - The Globe and Mail
• I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. | bobdahacker
• Google: This Proxy Service Is Using TV Streaming Devices to Host Cybercrime
• Opera now blocks one of the sneakiest malware tricks around

📰 Przeczytaj całe wydanie na stronie

HSIN zhakowany, aresztowanie członka Scattered Spider, kradzież schematów iPhone 18 Pro i kampania FortiBleed z ransomwarem Lynx.

Źródła:

• DHS confirms hackers breached HSIN info-sharing platform
• Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival | WIRED
• Office of Public Affairs | Alleged Member of Criminal Cyber Hacking Group „Scattered Spider” Arrested in Finland and Extradited to the United States | United States Department of Justice
• Hackers stole iPhone 18 Pro schematics from Apple supplier Tata
• FortiBleed credential-theft campaign linked to Lynx ransomware
• DHS confirms hackers breached HSIN info-sharing platform
• Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival | WIRED

📰 Przeczytaj całe wydanie na stronie

CitrixBleed, Gamaredon w akcji, Mustang Panda w Indii, SimpleHelp pod ostrzałem i BlueHammer w rękach ransomware.

Źródła:

• CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
• Russian Hackers Gamaredon Weaponize WinRAR Flaw for First Destructive Strike
• China-Linked Mustang Panda Hides Spy Tools Inside India's Trusted Cloud Storage App
• SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
• CISA: Windows BlueHammer flaw now exploited by ransomware gangs

📰 Przeczytaj całe wydanie na stronie

Microsoft usuwa 119 rozszerzeń z malwarem, Apple przyspiesza łatki przez AI, Sąd Najwyższy zmienia zasady geofencingu – oto najważniejsze historie dnia.

Źródła:

• Microsoft Removes 119 Edge Extensions Hiding… | DeafNews
• US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw - Infosecurity Magazine
• Apple accelerates security updates in response to AI-powered hacking risks
• Warner bill would create federally vetted list for secure, trustworthy AI agents
• Supreme Court Supports Privacy Protections for Cellphone Location Data

📰 Przeczytaj całe wydanie na stronie

Jaguar Land Rover padło ofiarą rosyjskich hakerów. FBI ściga grupy wynajmujące włamywaczy. DirtyClone zagraża kerneliom.

Źródła:

• Russian hackers were behind the Jaguar Land Rover attack that cost the British economy two and a half billion dollars
• Iranian national U.S. sought for $3.4 billion in hacking attacks arrested in Montenegro
• Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace
• GTA VI fans beware — experts warn 'a new wave of scam websites' is offering early access, but just stealing your bank details instead
• When cybercriminals hire burglars: Inside an alleged Russian effort to infiltrate multibillion-dollar US law firms
• Clone This Repo and I Own Your Machine | 0din.ai
• Polymarket Loses $3.1M to Frontend Vendor Hack While CFTC Investigation Deepens

📰 Przeczytaj całe wydanie na stronie

Złośliwe wtyczki JetBrains wykradły klucze AI 70 tys. programistów; Europol zamroził 47 mln USD; nowa luka w macOS; fałszywe pendrive'y w armii Japonii; autonomiczny robak AI.

Źródła:

• 15 Malicious JetBrains Plugins Stole AI API Keys from 70,000 Developers | Halting Problems
• '27 million stolen login credentials have been recovered': Global coordinated takedown hits SocGholish, Amadey, and StealC malware networks where it hurt
• macOS security flaw lets hackers disable Mac protection tools without a password
• Fake USB Sticks Spread China-Linked Virus in Japan's Army
• 'You can't patch your way out of it': Cheap AI worm can spread between devices without human guidance — but how did scientists create it?

📰 Przeczytaj całe wydanie na stronie

Rusztowy backdoor Gaslight, krytyczne luki w Ubiquiti, globalna operacja przeciw cyberprzestępczości, amator z AI i gigantyczne przejęcie Accenture w OT security.

Źródła:

• macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts - Decipher
• CISA warns of max severity Ubiquiti flaws exploited in attacks
• One-two punch delivered in global operation disrupts cybercrime "assembly line"
• Amateur Hacker Used Claude And OpenAI Agents To Hack 14 Companies
• Accenture snaps up majority stake in Dragos, acquires runZero and NetRise in critical infrastructure security push

📰 Przeczytaj całe wydanie na stronie

LastPass i Tata Electronics na celowniku, AI wykrywa luki w rządowych systemach, nowe zagrożenia CI/CD i macOS.

Źródła:

• LastPass Breached via Klue Supply-Chain Attack:… | DeafNews
• Tata Electronics Breach: 200,000 Files Leaked,… | DeafNews
• Anthropic’s Mythos model found vulnerabilities in classified US government systems, official says
• 'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows
• New macOS ClickFix attack silently mounts DMGs to push infostealer

📰 Przeczytaj całe wydanie na stronie

Rumuńskie szpitale wracają do papieru, dokumenty Apple wyciekają, luka w Defenderze, nowe ransomware i masowe łamanie haseł Fortinet.

Źródła:

• How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack
• Apple, Tesla documents exposed after hackers hit Tata: report
• Microsoft scrambles to patch a Defender security flaw called RoguePlanet
• Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes - TechRepublic
• Supercomputing on a Credit Card From The AI Rush Enabled The Massive FortiBleed Campaign | InfoStealers

📰 Przeczytaj całe wydanie na stronie