HeadFlash Security

Meta absorbs Virtue AI's red team; first fully autonomous ransomware spotted; NSA reboots TAO; Cloudflare fixes IPsec downgrade; China warns on Claude Code. Sources: Meta Absorbs AI Security's Top Red Team as Autonomous Ransomware Arrives Microsoft patches RoguePlanet Defender zero-day vulnerability NSA revives 'Tailored Access Operations' name for elite hacking unit | The Record from Recorded Fut...

One-in-two phones in Africa send telemetry to China; Linux kernel flaws enable guest escape and 5-second root; Ubiquiti critical patch; 7M driver licenses exposed. Sources: 1-in-2 phones sold in Africa exfiltrate telemetry to China - NowSecure Google pays $250K for Linux vulnerability allowing guest VM escapes - Ars Technica Ubiquiti Patches CVE-2026-50746, Maximum-Severity Flaw in UniFi… | DeafNe...

DeepSeek accidentally creates ransomware, a 16-year-old Linux flaw enables VM escape, and quantum circuits break ECC faster than Google. Sources: DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born' New Januscape Linux flaw allows VM escape on Intel, AMD devices GitLost: How We Tricked GitHub’s AI...

Microsoft pushes quantum readiness to 2029, Teams phishing drops EtherRAT, and a hacker arrest reveals Windows' persistent device ID. Sources: 2-Click Remote Code Execution in Meccha Chameleon Fake IT support calls on Microsoft Teams push EtherRAT malware A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID Microsoft says 'cryptographically relevant quantum computers could a...

FBI and Google dismantle NetNut botnet; AI agent runs first fully autonomous ransomware; Apple accelerates patches after AI finds WebKit flaws. Sources: Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus - The Citizen Lab FBI and Google Disrupt NetNut Botnet That Rented 2 Million Home Devices to Spies North Korea-linked npm packages impersonate...

CISA warns of SharePoint attacks; Canada strikes fentanyl brokers; FIFA platform exposed; NetNut botnet disrupted; Opera blocks clipboard hijacking. Sources: CISA: Microsoft SharePoint RCE flaw now actively exploited Canada’s electronic spy agency conducted cyberattacks on criminals brokering fentanyl ingredients, report says - The Globe and Mail I Could've Rickrolled the Entire FIFA World Cup. Al...

CitrixBleed memory overread, Gamaredon's first wiper, Mustang Panda's cloud spies, SimpleHelp bypass exploited, and BlueHammer now in ransomware campaigns. Sources: CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) Russian Hackers Gamaredon Weaponize WinRAR Flaw for First Destructive Strike China-Linked Mustang Panda Hides Spy Tools Inside India's Trusted...

Microsoft purges 119 malware-laced Edge extensions; NAIC breach exposes credit data; Apple fast-patches for AI risks; Warner bill targets AI agents; SCOTUS curbs geofencing. Sources: Microsoft Removes 119 Edge Extensions Hiding… | DeafNews US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw - Infosecurity Magazine Apple accelerates security updates in response to AI-powered hacking...

JLR attack blamed on Russian hackers, DirtyClone root exploit goes public, and more in today's security briefing. Sources: Russian hackers were behind the Jaguar Land Rover attack that cost the British economy two and a half billion dollars Iranian national U.S. sought for $3.4 billion in hacking attacks arrested in Montenegro Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace...

JetBrains plugins stole 70K API keys; Europol freezes $47M; macOS flaw disables security tools; AI worm spreads autonomously. Sources: 15 Malicious JetBrains Plugins Stole AI API Keys from 70,000 Developers | Halting Problems '27 million stolen login credentials have been recovered': Global coordinated takedown hits SocGholish, Amadey, and StealC malware networks where it hurt macOS security flaw...

North Korean macOS backdoor, critical Ubiquiti flaws, Operation Endgame takedown, AI-powered amateur hacker, and Accenture's $4.175B OT security play. Sources: macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts - Decipher CISA warns of max severity Ubiquiti flaws exploited in attacks One-two punch delivered in global operation disrupts cybercrime "assembly line" Amateur...

LastPass data exposed via Klue, Tata leaks 200K files, Anthropic's Mythos finds US gov flaws, and more. Sources: LastPass Breached via Klue Supply-Chain Attack:… | DeafNews Tata Electronics Breach: 200,000 Files Leaked,… | DeafNews Anthropic’s Mythos model found vulnerabilities in classified US government systems, official says 'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Wo...

Over 100 Romanian hospitals went offline to stop ransomware; a zero-day in Defender; and a GPU cluster cracked 75,000 Fortinet firewalls. Sources: How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack Apple, Tesla documents exposed after hackers hit Tata: report Microsoft scrambles to patch a Defender security flaw called RoguePlanet Prinz Eugen Ransomware Hits Rec...

Today's top stories: China's quantum computer test, Anthropic model shutdown, Telegram ban upheld, Europol shadow IT, and more. Sources: Post-Quantum Cryptography Meets China's Quantum Computer: What the Shield Leaves Exposed Chicago Experts Warn AI Chatbots Could Leak Data Alleged China ties at SK Telecom alarmed US officials and triggered Anthropic crisis Google Deepmind treats its own AI agents...

SocGholish takedown, Fortinet breach, AI phishing on Steam, and France's quantum deadline. Sources: Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp PSA: Steam's most popular PC background app was reportedly infected with malware via Wallpaper Engine's workshop Researchers say sweeping hack campaign against Fortinet devices compromised prominent organisations Meet Kali365 —...

Ransomware, supply chain attacks, and a Copilot zero-day — your daily security briefing. Sources: Hacking group claims major hack of Novo Nordisk, seeks $25M ransom Conti Ransomware Loader Developer Pleads Guilty in $150M Operation Riptide Case Attackers hijacked over 1,500 Arch Linux packages to steal developers' secrets, no hacking required A new Android trojan called Rokarolla targets 217 banki...

FBI dismantles China-based phishing service, Conti member pleads guilty, medical research breached, and ransomware activity hits record levels. Sources: FBI disrupts massive AI-powered phishing service using a million URLs Chinese hackers breach REDCap servers, steal medical research Ukrainian man pleads guilty in US to Conti ransomware charges AI is fueling a surge of new ransomware threats: Trav...

Google patches exploited Chrome zero-day; ShinyHunters hit PeopleSoft; FBI trains in fake town; AudiA6 dismantled; and more. Sources: Critical Google Chrome 0-Day Exploited in the Wild, Plus Microsoft and ServiceNow Under Fire Authorities dismantle 'AudiA6' ransomware crypto-laundering service Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks Google says Chinese cybercrime group...

Coupang hit with $409M fine over 37M customer breach; researcher drops 7th zero-day; FBI seizes 13 Chinese spy sites; AI agent phished; OpenAI bans influence accounts. Sources: Coupang hit with record $409 million data breach fine in Korea The researcher Microsoft threatened just dropped a seventh Windows zero-day hours after Patch Tuesday FBI Seizes 13 Sites Tied to China's Covert Effort to Hire...

FBI helps dismantle ransomware VPN, inside a North Korean hiring scam, CrowdStrike warns on China, and record Patch Tuesday. Sources: Boston FBI Joins Takedown Of 'First VPN' Used By Ransomware I got inside a North Korean hiring scam. What I found reveals a troubling shift in tactics CrowdStrike Warns China Is Behind 58% Of State-Backed Cyber Attacks As Chinese and North Korean Hackers Hunt US AI...

Today's key security events: France's Tchap hacked, Russian GPS jamming, critical Check Point VPN flaw exploited, Microsoft repos compromised. Sources: France’s ‘sovereign’ messenger Tchap was breached, and officials and the hacker disagree on how badly A 'massive escalation in electronic warfare': researchers show how Russian satellites can jam GPS across Europe — and a mysterious series of ‘inte...