Ruby 4.0.6 z uniwersalnym łańcuchem RCE; Coldcard traci 130 mln USD

Nowy łańcuch gadgetów omija zabezpieczenia Ruby, atak na Coldcard opróżnia portfele, a Clop uderza w Shell i GE.

Źródła:

• Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam
• Hackers drained $130 million in Bitcoin from 7,300 'cold' wallets once billed as secure
• U.S. courts will now make government use of spyware tools public
• NHS Blood and Transplant investigate data breach due to pager use
• Expired domains are a goldmine for hackers – and some cyber crime groups are investing millions in 'dropcatch' scams to deliver malware
• Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS… | DeafNews
• Clop Hacks Shell, GE, Philips in 43-Victim PTC Windchill Zero-Day Campaign
• A phone company just lost 1.6 million records to a phone call
• macOS Screen Sharing Flaw Actively Exploited to Mine Monero: Patch Now
• New Evooo1Bot Linux botnet turns routers into traffic relay nodes
• McDonald’s employee data listed for sale in wider Entra campaign | Ransomnews
• CVE-2026-33696: From a Schema Name to RCE in n8n | Simon Koeck
• Removing Exif Data Is No Longer Enough. AI Can Now Tell Where Your Photos Are Taken Without It

📰 Przeczytaj całe wydanie na stronie

🤖 Odcinek opracowany przy pomocy sztucznej inteligencji. Lektor syntetyczny.