55 ransomware victims across 20 groups. N0n posts 10 claims at once including PayPal's support operator and Venezuela's largest ISP. Gemini AI autonomously breaks out and compromises three companies — the first confirmed AI breakout. Cisco ISE zero-day actively exploited.…
30 ransomware victims across 14 groups, zero-click RCE in AI coding agents, heavy Microsoft patch wave, RatHat AI-powered Android malware, and CHOSEN BRICK Iranian spyware advisory.…
🎧 Subscribe to the podcast feed 🔊 Download episode audio Security News Iranian hackers use CHOSEN BRICK Windows malware to spy on targets (BleepingComputer) — Iranian threat actors are deploying a persistent Windows backdoor called CHOSEN BRICK that abuses legitimate system processes to evade detection, with the NCSC having previously flagged this campaign…
🎧 Subscribe to the podcast feed Security News Apple "Vulnpocalypse" — 260+ CVEs Patched in Record-Setting Release (The Register) — Apple's iOS 27 / macOS Golden Gate 27 cycle addresses more than 260 CVEs — the largest single patch cycle in the company's history — driven by AI-assisted…
🎧 Subscribe to the podcast feed Security News Massive Chrome & Edge Security Update — 30+ CVEs Patched (Google / MSRC) — A sweeping Chromium security release addresses over thirty vulnerabilities including use-after-free bugs in V8 and ANGLE, out-of-bounds writes in Media, type confusion in V8 and XML, and race…
🎧 Subscribe to the podcast feed Security News Chess.com Leak Exposes 7.3M Users, Evidence Points to Scraping (Security Affairs) — 7.3 million Chess.com user accounts have surfaced online; investigation points to a large-scale scraping operation rather than a direct breach of Chess.com systems. 220 Million Traveller…
🎧 Subscribe | Download Security News AI-orchestrated PaperCut NG/MF campaign — 395 orgs, 440 instances across 48 countries — Russian-speaking threat actor used OpenAI Codex and DeepSeek to develop and deploy exploits for CVE-2026-81578 and CVE-2026-82078. WatchTowr honeypot: full RCE, in-memory payload, config restored in under…
🎧 Subscribe | Download Security News Rockwell PLC web interface access at POWERGRID India (Ranchi) listed for sale on cybercrime forum — Threat actor offering unauthorised access to a Rockwell Automation PLC deployed at Indian power grid infrastructure. Live ICS access openly listed on criminal marketplace. (DarkForums) Claimed breach of Ukraine MoD Main…