One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches
Also: a robot vacuum flaw let hackers spy through your camera and steal your WiFi password, and 114,000 UK police officers just had their contact info dumped on the dark web.
ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In
Also: a ransomware gang that checks your GPS before asking for $200, and an autonomous AI agent ran a full hack against Hugging Face with no human driving.
A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.
Also: a red teamer stole a $250,000 trophy by pretending to fix the office Wi-Fi, and AI coding assistants are hallucinating the exact malware names attackers want them to install.
Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.
Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.