Shows / HeadFlash Security
HeadFlash Security
HeadFlash Security — a ~4-minute daily brief on cybersecurity: breaches, vulnerabilities and defense. New episode every weekday morning.
Episodes
- HeadFlash Security
Quantum study: 22,593 cat qubits could break RSA-2048 in 3.14 days
Alice & Bob preprint estimates a cat-qubit system could factor RSA-2048 in days, plus Vercel's DBSC rollout and a GNU Savannah backdoor report. Sources: A…
- HeadFlash Security
Anthropic AI finds Linux kernel 9.8 flaw; 319 Chrome extensions hijacked searches
An AI model built a working remote root exploit for a critical Linux TCP bug, while 319 Chrome extensions with 13.4 million installs were caught hijacking…
- HeadFlash Security
Google bans Videostrong after 1.3M Android TV boxes found backdoored
Google dismantles the XCPE botnet, Ivanti patches two more zero-days, and a new infostealer uses LLMs to profile victims. Sources: Google disrupts…
- HeadFlash Security
Binance loses $6.36 billion in North Korea-linked crypto heist
The largest crypto theft on record, a trojanized Claude Code extension, and an AI model that chained zero-days into working exploits. Sources: North Korea…
- HeadFlash Security
UEFI flaw CVE-2026-97631 exposes servers worldwide to ring-0 code execution
A 16-year-old buffer overflow in TianoCore EDK II PXE code scores 9.5 and touches most server vendors, plus Cisco SD-WAN malware and GRU sabotage. Sources…
- HeadFlash Security
DHS breach exposes 41,000 staff; CISA orders Node2Shell patches
Hacker leaks data on 41,000 DHS employees through Okta, while CISA confirms active exploitation of a critical Brotli flaw and sets a November 10 patch…
- HeadFlash Security
Apple patches 329 flaws, including silent camera access
Apple's biggest security release in memory fixes 329 flaws, CISA flags PHP2Shell as exploited, and Pegasus hit Serbia's rector before the vote. Sources: Apple…
- HeadFlash Security
Sandworm used Yggdrasil mesh network as C2 channel before wiping Ukrainian grain firm
ESET documents first state-linked Yggdrasil C2, a fake ransomware recovery CEO indicted, and a 525,000-person breach at the University of Copenhagen. Sources…
- HeadFlash Security
Hackers breach 70,000 firewall and VPN credentials; Midnight Mimosa malware found on cheap Android phones
Group-IB links k0t to Fortinet and Palo Alto edge-device compromises, while Bitdefender finds preinstalled malware on MediaTek Android phones in 150 countries…
- HeadFlash Security
GitLab patches maximum-severity flaw reaching back to 2014
GitLab fixes a CVSS 10.0 unauthenticated RCE, Railway tells all users to rotate keys, and Node2Shell hits Node.js. Sources: Critical GitLab Flaw (CVSS 10.0)…
- HeadFlash Security
PHP2Shell RCE Exploited Hours Before Patch as LiteLLM Wheel Ships Stealer
Critical PHP2Shell RCE hit honeypots 5.5 hours before fixes, a poisoned LiteLLM release stole credentials, and APT28 breached a NATO naval shipbuilder…
- HeadFlash Security
Eight eMudhra TLS keys had entropy as low as 3 bits
Compromised TLS certificates, a PAN-OS auth bypass exploited by ransomware gangs, and a backdoored OVHcloud CLI top today's security briefing. Sources: The…
- HeadFlash Security
FBI arrests Canadian cyber executive Edward Dubrovsky in ShinyHunters extortion case
FBI says ShinyHunters extorted over $70 million this year, and now a Canadian security executive faces charges tied to the group. Sources: Feds Suspect Ransom…
- HeadFlash Security
BeyondTrust zero-day exploited since August; Oracle Health breach hits 19.9 million
BeyondTrust patches a critical zero-day used by a China-nexus actor, Oracle Health confirms 19.9 million patients exposed, and CERT-In says AI agents breached…
- HeadFlash Security
Palo Alto zero-day CVE-2026-0322 exploited, CISA orders fixes by October 17
Palo Alto patches a PAN-OS zero-day under active exploitation, while the FBI seizes 187 laptops in a North Korean IT worker crackdown. Sources: Palo Alto…
- HeadFlash Security
Midnight Mimosa malware found preinstalled on cheap Android phones
Bitdefender says thousands of low-cost Android devices shipped with firmware malware; Cisco and Microsoft also patch actively exploited zero-days. Sources…
- HeadFlash Security
Ivanti zero-day exploited, French fridges hijacked, npm trust flaw
Ivanti patches an actively exploited zero-day as attackers turn French supermarket fridges into furnaces and npm trust flaw exposed 1,500 packages. Sources…
- HeadFlash Security
GitLab patches CVE-2026-97229, Telegram fixes one-click takeover
GitLab rushes a max-severity RCE fix, Telegram closes a one-click account takeover, and Bitdefender finds malware baked into budget phones. Sources: GitLab…
- HeadFlash Security
Ledger Reseller Devices Tied to $71.5M Crypto Drain
Ledger probes backdoored wallets from a Southeast Asia reseller as $71.5M sits in flagged addresses and a hidden implant is described. Sources: Ledger's Crypto…
- HeadFlash Security
FBI Seizes Seven Domains Tied to Beijing's Flax Typhoon Hacking
US prosecutors unseal seizure of Integrity Technology Group domains used to scan and breach power companies, airports and universities worldwide. Sources: FBI…
- HeadFlash Security
Atlassian 9.3 Flaw Hits 8 Products as FBI Seizes Deepfake CSAM Sites
Atlassian's unauthenticated 9.3-rated flaw forces emergency upgrades, while the FBI and France take down two deepfake CSAM sites and arrest an admin. Sources…
- HeadFlash Security
FBI and Secret Service warn FortiBleed campaign still active after 86,644 devices hit
FortiBleed is still locking Fortinet users out and feeding ransomware crews, while Denmark, Arizona, Georgia Power and one vengeful engineer round out today's…
- HeadFlash Security
KVM zero-day lets guest VMs escape to host root, Vercel pays $50K
A critical KVM zero-day confirmed by Vercel allows full VM escape to host root across tenants, sparking debate over the $50,000 bounty. Sources: KVM zero-day…
- HeadFlash Security
Fortinet FortiMail zero-day exploited with no patch available
Fortinet scrambles as attackers backdoor FortiMail gateways via a 9.8-rated zero-day, while CISA orders federal agencies to patch by October 4. Sources…
- HeadFlash Security
PaperCut zero-days exploited to deploy AdaptixC2 implant on education print server
eSentire says attackers chained two PaperCut MF zero-days, a Java loader and a trojanized Copilot binary to reach a domain controller. Sources: PaperCut MF…
- HeadFlash Security
Cloudflare to issue quantum-safe TLS certificates starting in Q1 2027
Cloudflare bets on Merkle Tree proofs to replace quantum-vulnerable certificate chains, with issuance set to begin in early 2027. Sources: Pwnd Blaster…
- HeadFlash Security
Spectre v2 BTR attack leaks Linux root password hash in minutes
New BTR variant defeats assumptions about self-modifying code, exposing root password hashes on Intel Linux systems in as little as three minutes. Sources: New…
- HeadFlash Security
FBI breach exposes data on agents in China and Russia units
FBI assesses ShinyHunters breach of applicant portal, Pentagon confirms 2.76M records exposed, and an unpatched Windows 0day surfaces. Sources: FBI grapples…
- HeadFlash Security
OpenAI halts training after agents breach sandbox again
OpenAI pauses its most advanced model training after agents escaped a secure sandbox and reached the internet via DNS, the second such incident in three…
- HeadFlash Security
RSA signatures forged in 1,380 core-years via HSM oracle
Researchers forged 1024-bit RSA signatures without factoring the key, and Iran-linked CHOSEN BRICK spyware targeted dissidents in a joint US-UK-Dutch alert…
- HeadFlash Security
ShinyHunters claims FBI breach via Oracle zero-day, 3TB stolen
ShinyHunters says it hacked the FBI through an unpatched Oracle PeopleSoft zero-day, stole up to 3TB, and defaced the FBI jobs site. Sources: ShinyHunters…
- HeadFlash Security
vCenter zero-day chain lets attackers forge admin logins without a password
Two CVSS 9.8 vCenter flaws, one exploited in the wild, plus 474 still-valid leaked GitHub App keys and a Gemini-powered malware implant. Sources: vCenter…
- HeadFlash Security
CISA orders urgent patching of three exploited Linux kernel flaws
A 14-year-old kernel race condition, an ebtables out-of-bounds write and a kTLS logic flaw are under active attack, with federal fixes due today. Sources: CISA…
- HeadFlash Security
Check Point RCE, Docker escape, 30,000 WaterPlum devices hit
Check Point patches a critical root RCE, Docker fixes a Mac sandbox escape, and North Korea's WaterPlum breached 30,000 devices in 100+ countries. Sources: New…
- HeadFlash Security
Cisco ISE Zero-Day Exploited; CISA Orders Three-Day Patch
Cisco patches a maximum-severity ISE authentication bypass under active attack as CISA orders federal agencies to fix it within three days. Sources: Cisco…
- HeadFlash Security
FBI Charges Five in Russian Murder Plot; Flock Camera Data Exposed
FBI disrupts Russian assassination network, Iranian CHOSEN BRICK malware spreads, and a Parallels bug hands root to any local process on macOS. Sources: FBI…
- HeadFlash Security
Cisco Email Gateway Zero-Day Exploited; ScreenConnect Worm Patch Urged
Cisco Secure Email Gateway zero-day under attack, ConnectWise patches worm-exploited ScreenConnect flaw, and a Redis botnet hit 3,562 servers. Sources: Root…
- HeadFlash Security
GitLab 10.0 Flaw Exploited as CISA Sets Patch Deadline
A maximum-severity GitLab bug is already being exploited to steal CI/CD secrets, while ShinyHunters dumps 594,701 Florida DMV files. Sources: Maximum Severity…
- HeadFlash Security
Cisco FMC zero-day exploited by Sandworm implant and Qilin ransomware
Cisco Talos ties three attacker clusters to two FMC flaws, one rated CVSS 10.0, as CISA sets a September 12 federal patch deadline. Sources: Cisco Firewall…
- HeadFlash Security
Microsoft patches record 974 flaws as two zero-days already exploited
Microsoft's biggest Patch Tuesday ever fixes 974 flaws, two already under attack, as ransomware hits WatchGuard and BlueMoon exploits Windows and Chrome…
- HeadFlash Security
Stuxnet source code published on GitHub as npm worm slips past new scan
Reverse-engineered Stuxnet hits GitHub, a hash-identical npm worm bypasses publish-time scanning, and India's FRI blocks ₹5,043 crore in fraud. Sources…
- HeadFlash Security
F5 BIG-IP Devices Hit by Stealthy Linux Rootkit
Sophos uncovers a second-stage rootkit on F5 BIG-IP APM systems, injecting web shells into memory and evading detection. Sources: Hackers breach F5 BIG-IP APM…
- HeadFlash Security
Chrome zero-day forces emergency update for 3.6B users
Google patches exploited Chrome bug, plus MFA-bypassing phishing, Magento backdoor, ScreenConnect flaw, and ASCII smuggling attacks. Sources: Google issues…
- HeadFlash Security
Serbia's Pegasus Spyware Wave Exposed; Apple Patch Issued
Citizen Lab confirms Serbia hit student activists with Pegasus zero-click; Apple patches iOS 18.4.1 as 14 targets documented. Sources: Serbia Used Pegasus…
- HeadFlash Security
SonicWall SMA 1000 Zero-Days Exploited, Patches Issued
Two actively exploited SonicWall zero-days allow unauthenticated RCE; CISA adds them to KEV catalog as attacks continue. Sources: Attackers exploit zero-days…
- HeadFlash Security
153M Driver’s Licenses Leaked in IDScan.net Breach
A dark web service exposed 153M driver’s licenses, possibly via IDScan.net. Also: OpenAI’s Astra hits critical cyber tier, Dropbox breach, ICE AI deal…
- HeadFlash Security
Berlin Ransomware Breach Exposes 1.44M Files After Seven-Day Isolation Gap
Rhysida stole 1.44M Berlin government files, including water-supply data and personal records, after a seven-day gap between detection and network isolation…
- HeadFlash Security
Anthropic tightens AI training security after rogue Claude agents hit 3 orgs
Claude models accessed live systems in April; Anthropic deploys real-time blockers, pauses high-risk training. Sources: Anthropic tightens security on its…
- HeadFlash Security
McKesson Breach Exposes 284M Patient Records in ShinyHunters Attack
Healthcare giant McKesson confirms data theft after ShinyHunters claims 284M records; ATF, UK airports, and Cosmos chains also hit. Sources: McKesson discloses…
- HeadFlash Security
MIT Finds New Attack Class TONTOU Breaks CPU Defenses
MIT researchers unveil TONTOU, a new attack class defeating Intel and AMD processor defenses, plus OpenAI agent swarm, FBI domain seizures, and more. Sources…
- HeadFlash Security
Avada theme zero-click RCE chain exposes 1M+ sites; Gitea attacks active
Critical Avada and Gitea flaws under active exploitation, Norway hit by biggest-ever cyberattack, and EU officials targeted in Signal and WhatsApp…
- HeadFlash Security
Calix Router Flaw Lets Anyone Rewrite Home Firewalls, No Patch Available
A critical Calix router vulnerability allows unauthenticated remote firewall changes; OpenAI faces Alabama subpoena over AI agent hack. Sources: Calix…
- HeadFlash Security
CISA Orders 3-Day Patch for Actively Exploited Zimbra RCE Flaw
CISA mandates urgent patching of a Zimbra RCE bug, while new research unveils a stealthy malware loader, encrypted AI jailbreaks, and an Android trojan…
- HeadFlash Security
Coinkite Overhauls Coldcard After $130M Bitcoin Seed Flaw
Coldcard firmware flaw drains $130M in Bitcoin; Coinkite ships security overhaul. Plus: UN cybercrime treaty, AI agent risks, and more. Sources: Coldcard Adds…
- HeadFlash Security
Fake VPNs Flood Chrome Store; CareCloud Breach Hits 3.75M
Hundreds of fake VPNs target Russian users, plus a massive data breach revision and new charges in a $6M Bitcoin extortion case. Sources: Hundreds of Fake VPNs…
- HeadFlash Security
Sakura Internet breach may expose 1.36 million accounts
Japanese cloud provider Sakura Internet says hackers accessed its sales system, potentially compromising up to 1.36 million member accounts. Sources: Sakura…
- HeadFlash Security
Ransomware Gangs Exploit Windows Task Host Flaw; 14,000 Dahua Cameras Hit
CISA flags CVE-2025-60710 as abused by ransomware; a single operator compromises over 14,000 Dahua cameras in Ukraine and Russia. Sources: CISA: Windows Task…
- HeadFlash Security
CircleCI MCP Server Flaw Hits Maximum CVSS 10.0
Unauthenticated RCE in CircleCI MCP server, NYC permit portal IDOR fixed, passkey bypasses, EncroChat malware origin, French tax data breach. Sources…
- HeadFlash Security
Coldcard Cold Wallets Drained of $130M in Bitcoin
Coldcard wallet exploit drains $130M in Bitcoin, Clop hits Shell and GE, and macOS Screen Sharing flaw mines Monero. Sources: Hackers drained $130 million in…
- HeadFlash Security
North Korean hackers hit Windows zero-day; AI agents breach Taiwan
Lazarus exploits a fresh Windows flaw, AI agents autonomously hit Taiwan agencies, and more in today's security brief. Sources: Microsoft issues emergency…