https://badcyber.com/Recent content on Zaufana Trzecia StronaHugoen-USSun, 05 Jul 2026 11:00:00 +0200https://badcyber.com/it-security-weekend-catch-up-july-5-2026/Sun, 05 Jul 2026 11:00:00 +0200https://badcyber.com/it-security-weekend-catch-up-july-5-2026/

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. [PL][VIDEO] GPS interference in Europe. The trail leads to a Russian satellite
2. [PL] How the Social Design Agency works on Russia's behalf
3. [PL][AUDIO] Fifth episode of the Informatyk Zakładowy Retro-podcast
4. [PL][VIDEO] Digital Hydra: does the individual stand a chance?
5. [PL] Unpaid parking fee? Watch out for scammers
6. [PL][VIDEO] Why everyone falls for online scams
7. [PL][VIDEO] They're trying to steal your Gmail credentials on LinkedIn
8. [PL] Polish cyber police identify 17-year-old behind attacks on mobile subscribers
9. [PL] How the FBI trains investigators in a realistic cyber range
10. [PL] Illegally processed personal data as evidence in court
11. [PL] "Children online 2026" report: algorithms and AI are already harming preschoolers
12. [PL] Eustella, a secure European alternative to ChatGPT and Gemini
13. Hate “the algorithm?” RSS is one of the tools you’ve been looking for
14. Espionage against the European Parliament. Member of committee investigating spyware hacked with Pegasus
15. Global cyber strike disrupts SocGholish, Amadey, and StealC malware networks
16. United States seizes hundreds of Internet domains used to illegally stream World Cup matches
17. Google’s continued disruption of malicious residential proxy networks
18. Alleged member of criminal cyber hacking group “Scattered Spider” arrested in Finland and extradited to the United States

For the more technical

1. [PL][VIDEO] An overview of interesting web application vulnerabilities
2. [PL][VIDEO] FortiBleed isn't a new flaw, it's a credentials issue
3. [PL][VIDEO] Railway cyber resilience: from vulnerabilities to compliance and security
4. [PL] Deepfakes and a spoofed gov.pl site backed a fake investment platform
5. Cybercrime breaches Klue: Salesforce data impacted for many victims
6. Kali Linux 2026.2 release (GNOME 50, KDE 6.6, Helper Scripts, APT Formats & VM Boot Tweaking)
7. WinPE as a stateless harness for Windows driver testing and fuzzing
8. Dissecting and exploiting Linux LPE variant: DirtyClone (CVE-2026-43503)
9. 282 iOS AI apps leak API keys and open AI proxy access in network traffic study
10. Indirect prompt injection in web content targets AI agents
11. Silent Swap: A crypto clipper extension campaign
12. Chromium extension uses AI‑related branding to redirect browser search
13. Clone this repo and I own your machine
14. BioShocking AI: “Gaming” the AI browser and escaping its guardrails
15. ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
16. AsyncRAT reloaded: Using Python and TryCloudflare for malware delivery again
17. An analysis of ValleyRAT infection campaigns from fake installers, Japanese malicious emails
18. TONResolver RAT abuses TON blockchain to target Japan's hotel industry
19. From Bing search to ransomware: Bumblebee and AdaptixC2 deliver Akira
20. Veil#Drop: Blogspot-hosted PowerShell loader delivers PureLog stealer through XOR-encoded in-memory .NET payloads
21. PamStealer: a Rust-based macOS infostealer that validates credentials through PAM
22. RustDuck: An in-depth analysis of a two-stage botnet
23. Miasma Mini Shai-Hulud hits LeoPlatform npm packages and GitHub Actions, expands to the Go ecosystem
24. [VIDEO] Signals & Stories: The evolution of attribution in cyber threat intelligence
25. Mustang Panda targets India's government and energy sectors with Zohomurk and Minirecon
26. Operation DragonReturn: China-nexus cyber espionage campaign targeting Govt. of India/MoF tax infrastructure via multi-stage DcRAT deployment
27. UNC1151 phishing email targeting Belarusian politician points to multi-national campaign

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

]]>https://badcyber.com/it-security-weekend-catch-up-june-26-2026/Fri, 26 Jun 2026 23:30:00 +0200https://badcyber.com/it-security-weekend-catch-up-june-26-2026/

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. [PL] [VIDEO] Everyday cybersecurity
2. [PL] Why posting photos of children with their certificates is a bad idea?
3. [PL] Are website login credentials personal data?
4. [PL] Members of a criminal group arrested by Poland’s CBZC with help from the FBI and HSI
5. [PL] Selling a phone on Vinted? Watch out for more than phishing and BLIK scams
6. [PL] How a popular charity campaign became fuel for scammers
7. [PL] Poland’s data protection chief advises law enforcement on how to interpret deepfakes
8. [PL] NIS2: Oversight and supervision of essential and important entities
9. [PL] Whose digital sovereignty is the European Union trying to protect?
10. [PL] Blocking children’s access to pornography vs freedom to provide services
11. [PL] Could disappearing messages become a way to avoid transparency?
12. EU says Amazon, Microsoft cloud services should fall under digital dominance rules
13. Russia breaks into human rights activist’s phone with Cellebrite
14. Scammers have killed the physical Steam Gift cards
15. Nintendo confirms data stolen in WebMD subsidiary cyberattack
16. JaredFromSubway MEV bot hacked in $15 million crypto theft

For the more technical

1. [PL] How an unauthorized account gained access to FIFA systems
2. Introducing usbliter8: An A12/A13 SecureROM exploit
3. Squidbleed (CVE-2026-47729). Heartbleed's ancient cousin, hiding in Squid since 1997
4. When defenses become attack surface: CVE-2026-20971, a Samsung kernel UAF
5. Following user outcry, AMD reinstates memory encryption in consumer CPUs
6. PixelSmash – critical FFmpeg vulnerability turns media files into weapons
7. More than 4,000 legacy routers compromised by AryStinger, turned into global attack proxies for hackers
8. Inside the FortiBleed open directory: A technical analysis of what the attacker left behind
9. Attackers actively exploiting sensitive information exposure vulnerability in Gravity SMTP plugin
10. BadBlocker: 11 million users, one server call away from compromise
11. macOS.Gaslight: Rust backdoor turns prompt injection on the analyst, not the sandbox
12. Lost in relocation: analysis of a new loader distributing CastleStealer
13. Inside OnyxC2: The new stealer targeting 210 apps
14. Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
15. SolarisLoader - a new malware loader
16. Crypto Clipper uses Tor and worm-like propagation for persistence and control
17. A multi-stage steganographic loader campaign deploying diverse payloads globally
18. Inside Vidar’s ABE bypass: From memory scanning to APC injections
19. EvilTokens: How “ghost” code threatens US and European businesses
20. Payouts King ransomware initial access broker deploys new Edgecution malware
21. Threat actors weaponizing RAR archives to target Thailand’s healthcare sector
22. Threat intelligence report: Nation-state targeting of water systems 2024–2026

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

]]>https://badcyber.com/it-security-weekend-catch-up-june-19-2026/Fri, 19 Jun 2026 23:00:00 +0200https://badcyber.com/it-security-weekend-catch-up-june-19-2026/

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. [PL] Fraudsters behind fake online stores scam more than 440 people
2. [PL] UOKiK fines Interviewme.pl over costly CV builder
3. [PL] Scammers pose as InPost to hijack WhatsApp accounts
4. [PL] Fake Allegro email warns of delivery address error
5. [PL] People need to be notified of surveillance without delay
6. [PL] Palantir loses in Switzerland as Europe moves to curb reliance on the US
7. [PL][AUDIO] Fourth episode of the Informatyk Zakładowy retro podcast
8. China’s universities cut thousands of ‘obsolete’ arts degrees in AI overhaul
9. UK to ban social media for kids under 16, may impose overnight curfews
10. [VIDEO] The internet group that changed hacking forever
11. Cybercriminals are evading Telegram crackdowns in 'patriot party' and crypto-themed channels
12. Council of Europe hacked in ShinyHunters' PeopleSoft heist
13. Kodak confirms data breach claimed by ShinyHunters extortion gang
14. Ransomware gangs cut off from EUR 336 million ‘AudiA6’ crypto laundering pipeline
15. Inside the FBI's 22,000 square-foot indoor technical training environment in Huntsville

For the more technical

1. [PL] Fake shipping document campaign shows PureLogs Stealer is a real threat
2. FortiBleed — 75k Fortinet firewalls have admin passwords cracked
3. Cisco Catalyst SD-WAN Manager arbitrary file write vulnerability
4. More evidence that words don't mean what we thought they meant (Ivanti Sentry pre-auth OS command injection CVE-2026-10520)
5. Compromise OpenClaw with prompt injections in message objects
6. 10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums
7. From emerging threat to top-tier ransomware-as-a-service: The evolution of INC ransomware
8. Interlock and Rhysida within the ransomware ecosystem
9. Killing me gently: Inside Gentlemen’s EDR killer framework
10. Malware à la Mode: Tracking Dropping Elephant tradecraft through a China-themed loader chain
11. Operation Endgame vs SocGholish
12. Atomic Arch: Attackers hijack trusted AUR packages to deliver rootkit-like malware
13. Multiple JetBrains IDE plugins caught stealing AI keys
14. From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
15. Shai-Hulud campaign evolution: Miasma, Hades, and AI scanner evasion
16. 152 Chrome live wallpaper extensions hid ad tracking and faked Google search traffic
17. Rokarolla: Android banker with complete device takeover capabilities
18. NFCShare evolves: from a banking phishing APK to a GitHub-hosted Android NFC fraud campaign
19. Hidden in Teams: DragonForce attackers weaponize Microsoft Teams relays to stay hidden
20. ClickFix campaign generated via AI delivers SmartRAT
21. Someone's hands are on your keyboard then your whole network. Courtesy of ClickFix, Potemkin, RMMProject and EtherRAT
22. The devil, eight million emails, and a whole lot of milk
23. FishMonger’s arsenal upgraded: SprySOCKS for Windows
24. Public and private medical community targeted by China-nexus threat actor pursuing artificial intelligence, cyber, medical, and national defense research
25. Velvet Ant’s Operation Highland: How a China-nexus actor infiltrated an internal network undetected

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

]]>https://badcyber.com/it-security-weekend-catch-up-june-12-2026/Fri, 12 Jun 2026 23:30:00 +0200https://badcyber.com/it-security-weekend-catch-up-june-12-2026/

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. [PL] Polish government approves National Digitalization Strategy
2. [PL] Is transparency a threat to national security?
3. [PL][VIDEO] Secret Department No. 4: What Russian intelligence agents study?
4. [PL] Expert warns there’s no such thing as a risk-free investment. A “safe” profit offer online could be a scam
5. [PL] The World Cup “guaranteed win” that drains your account: An analysis of a deepfake campaign ahead of the FIFA World Cup
6. [PL] Mandatory age checks for porn sites
7. [PL][AUDIO] Meta and Google in court. Will the verdicts change the internet?
8. [PL] Americans united in opposition to AI data centers
9. [PL] AI enables coordinated disinformation campaigns
10. [PL] Poland’s data protection chief appeals the closure of an investigation into AI-generated nude images of a student
11. Aviva detects record £230m in bogus insurance claims as use of AI rises
12. Pokémon Go data trained AI that could assist military drones in war zones
13. [VIDEO] Something is jamming GPS over Europe. Here's what we found
14. French govt messaging service breached in account hijacking attack
15. Spyware firm targeted WhatsApp users in defiance of US court order, Meta says

For the more technical

1. [PL][VIDEO] MCP – the hot topic in the world of app security
2. [PL] Signal rolls out new anti-phishing features
3. UNC1151/Ghostwriter phishing campaign targeting Gmail accounts
4. Active exploitation of Check Point VPN authentication bypass (CVE-2026-50751)
5. Inside the cross-platform propagation of a new Gafgyt variant C0XMO
6. June 2026 Patch Tuesday: Microsoft patches 206 vulnerabilities including three publicly disclosed zero-days
7. When "moderate" means "sometimes"
8. Google patches new Chrome zero-day flaw exploited in the wild
9. [VIDEO] The only Open Redirect that scares me
10. Oracle mitigates PeopleSoft zero-day exploited in data theft attacks
11. Off by !: Exploiting a use-after-free in the Linux kernel
12. FSB’s matryoshka – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm
13. FSB’s matryoshka #2/3 – Gamaredon’s gifts that keeps unpacking – GammaLoad
14. FSB’s matryoshka #3/3 – Gamaredon’s gifts that keeps unpacking – GammaSteel
15. Threat actors weaponize AI hype to deliver AsyncRAT
16. IronWorm: Shai-Hulud's rustier cousin
17. Miasma npm supply chain attack: Self-spreading worm via Phantom Gyp
18. Inside the Miasma software supply chain attack toolkit
19. The blight reaches Microsoft: 73 repos disabled in 105 seconds
20. You do surprise me.exe: An unexpected executable in Hola Browser
21. AI brands as bait: How threat actors are using the AI hype in social engineering
22. Don't fear the repo: UNK_DeadDrop phishing campaign targets developers to steal cryptocurrency
23. GoFlateLoader: A widespread Golang loader delivering multiple infostealers
24. Blinding the watchmen: Abusing cloud logging services for defense evasion and visibility
25. Technical analysis of MLTBackdoor
26. From fiscal lures to remote access, a previously undocumented NinjaOne RMM abuse chain
27. OceanLotus: From external espionage to domestic targeting
28. VerdantBamboo: Just another BRICKSTORM in the firewall
29. APT28, an evolution of tradecraft
30. Old WinRAR flaw fuels attacks on Ukraine: How unmanaged software keeps the door open
31. Seeking counsel: Ongoing targeted campaign against US law firms
32. Behind Khmer Shadow: Targeted espionage against Cambodian government entities

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

]]>https://badcyber.com/it-security-weekend-catch-up-june-7-2026/Sun, 07 Jun 2026 22:30:00 +0200https://badcyber.com/it-security-weekend-catch-up-june-7-2026/

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. Hackers used Meta’s AI support bot to seize Instagram accounts
2. Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code
3. 'Dumbass' criminal breaks the 'first rule of ransomware club'
4. Can’t make sense of Dashlane’s vault theft notification? You’re not alone
5. GTA cheat service Atlas Menu hacked as attacker alleges screenshot spying

For the more technical

1. Android Security Bulletin—June 2026
2. CVE-2026-28910: Breaking macOS App Sandbox data containers, TCC, and hijacking apps using Archive Utility
3. CIFSwitch: a non-universal Linux local root vulnerability
4. Critical Windows Netlogon RCE flaw now exploited in attacks
5. 1-click GitHub token stealing via a VSCode bug
6. HTTP/2 Bomb: AI-discovered DoS hits every major web server
7. ChatGPhish: The page is the payload
8. 15,000 WordPress sites affected by administrator account creation vulnerability in WP Maps Pro WordPress plugin
9. Malicious NuGet package impersonates Sicoob SDK to exfiltrate banking certificates and passwords
10. Typosquatted npm packages used to steal cloud and CI/CD secrets
11. Red Hat npm packages compromised to spread a credential-stealing worm
12. Mini Shai-Hulud campaign hits Red Hat Cloud Services npm packages
13. New Shai-Hulud hits npm: @redhat-cloud-services compromised
14. Malware targeting WordPress abuses Steam community profiles for command & control operations
15. Game Over: WeedHack – The rise of Minecraft malware-as-a-service campaign
16. NightSpire ransomware attack chain, tools and tactics
17. GREYVIBE: A Russia-nexus group leveraging AI across state-aligned operations
18. Sanctioned, seized, still scanning: Inside a Russian bulletproof hosting network targeting the EU

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

]]>