Cyber Dispatch™️
380 subscribers
21 photos
1 video
50 links
The definitive source for critical cybersecurity news. When a major threat breaks, we dispatch.

#CyberDispatch #CyberSecurity #InfoSec #ThreatIntelligence #ZeroDay #DataBreach #SecurityNews
Download Telegram
Poland blocked what officials described as its strongest cyberattack on the energy sector in years.
CISA confirms active exploitation of a critical VMware vCenter Server flaw.

CVE-2024-37079 allows remote code execution via a DCE/RPC heap overflow if an attacker has network access.
Google Project Zero revealed a working zero-click exploit chain against Pixel 9 phones.

A bug in the Dolby audio decoder let Google Messages process a malicious audio file in the background, gaining code execution, then a kernel bug completed the takeover. Pixel patches shipped in early Jan 2026.
Hackers get $1,047,000 for 76 zero-days at Pwn2Own Automotive 2026.
A single spreadsheet formula can now lead to full server takeover in Grist-Core.

The flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.
Microsoft rushed out out-of-band fixes for an actively exploited Office zero-day.

CVE-2026-21509 (CVSS 7.8) lets attackers bypass Office security using a malicious file that must be opened by the victim.
Bitcoin seed panic fake—scammers bait thieves with bogus lists. Real risks: Snap malware, phishing. Store offline, verify updates. Funds safe.
Edward Snowden: "Both Apple and Android devices unfortunately are not especially good in protecting your privacy.

"Every phone, even when the screen is off you think it's doing nothing, but it's screaming 'Here I am'."

"They can see everything about you. They can see everything about what your device is doing, and they can do whatever they want with your device."
New app UpScrolled is number 1 on the US Play Store now and the most downloaded social network app after the mass censorship of TikTok.
ShinyHunters claims 2 Million Crunchbase records; company confirms breach.
Nearly 800,000 Telnet servers exposed to remote attacks.
TikTok Finalizes a Deal to Form a New American Entity.
SoundCloud - 29,815,722 breached accounts.
Turns out Google was also listening when you said nothing, thought nothing, and were just existing in your kitchen.

$68 million later, the official position is:

“We accidentally recorded private conversations. Accidentally shared them with advertisers. Super weird. Oops.”

Reminder that the smart speaker was never smart.
TikTok uninstalls are up 150% following the Larry Ellison took over the platform in the US - CNBC News.
Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers.
Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies.
Fake Microsoft Teams Billing Phishing Alerts Reach 6,135 Users via 12,866 Emails.
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code.
Crunchbase Confirms Data Breach After Hacking Claims.
Don't Judge a PNG by Its Header: PURELOGS Infostealer Analysis.