One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches
Also: a robot vacuum flaw let hackers spy through your camera and steal your WiFi password, and 114,000 UK police officers just had their contact info dumped on the dark web.
A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.
Also: an ad company's hacked script quietly rewrote people's crypto wallet addresses, and Anthropic caught its own Claude models hacking three real companies during a safety test.
Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.
Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.
A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire
Also: the twice-convicted contractors who deleted 96 government FOIA databases when they got fired and then Googled how to erase the logs, and Cisco's SD-WAN had an undetected root-access zero-day for months.