‼️ BREAKING: German file-transfer provider FTAPI, used by government agencies and more than 2,000 companies, has confirmed a ransomware attack after The Gentlemen gang listed it on its leak site.

The company says attackers breached a single internal server on September 14 but that its platform and customers' systems and data were not affected.

A countdown on the leak site shows about five days left.

‼️ BREAKING: A newly released jailbreak cracks every PS5 firmware from 7.00 to 13.60, and early testers say it loads in seconds and works on the PS5 Pro too.

All it takes is visiting a website in the browser.

It chains a WebKit browser bug with a kernel use-after-free race to seize kernel read/write, then loads payloads for homebrew and game backups.

https://github.com/ntfargo/Relapse-Exploit

The CIA and West German intelligence secretly bought Swiss encryption maker Crypto AG in 1970, turning the machines governments paid to protect their secrets into a way to read them.

Those governments had no idea the machines were rigged to read their messages.

In the 1980s, Crypto devices accounted for roughly 40% of the foreign government messages the NSA decoded.

The CIA didn't sell the company until 2018 and called the operation "the intelligence coup of the century."

In 2005, Sony BMG music CDs left Windows PCs less secure by secretly installing copy-protection software that hid itself using rootkit techniques.

The rootkit hid any file whose name began with $ SYS $, so malware writers soon gave their own files that prefix to stay invisible.

Sony's fix made it worse, as the web-based uninstaller it released could let any website download and run code on the PC.

A 2007 FTC settlement required Sony BMG to swap the CDs, offer removal tools and pay up to $150 to repair PCs damaged by removal attempts.

Mark Russinovich caught the rootkit with RootkitRevealer, a free tool he and Bryce Cogswell built to expose malware that hides from antivirus software.

It compares what Windows reports with the raw data on disk, so anything being cloaked shows up as a mismatch.

In late October 2005, a test version flagged cloaked files and registry keys on his own PC, which he traced to a Sony CD he'd bought, Van Zant's Get Right With the Man.

The license he'd accepted never mentioned the cloaking, and his Oct. 31 blog post exposing it blew the scandal open.

❗️ A San Francisco hackathon rejected a former Israeli intelligence Unit 8200 engineer, telling him it didn't want Israel's military to make participants' pagers, phones and laptops "explode in their faces."

Organiser Mostapha Benhenda pointed to the 2024 pager attacks in Lebanon and later told the former Israeli intelligence member Adam Levi there was "no way to know" he wasn't involved.

❗️ The Dutch intelligence service AIVD is warning people not to hold confidential conversations in or near their cars, saying the microphones in many modern vehicles can technically be switched on remotely to eavesdrop.

Some state actors can request car data from carmakers and other companies or hack in to get it themselves, the agency says.

It advises skipping wireless charging and Bluetooth or Wi-Fi pairing, using a USB data blocker and not taking a car with an external camera to a sensitive location.

https://www.aivd.nl/actueel/nieuws/2026/09/30/digitale-dreigingen-in-slimme-voertuigen

‼️ BREAKING: DeepSeek is building software for Huawei's AI chips to break its dependence on Nvidia, open-sourcing six core tools that take direct aim at CUDA.

Huawei backed the project, which adapts TileLang, a coding language DeepSeek calls simpler than Nvidia's CUDA, for Huawei's Ascend 950 AI chips.

https://mp.weixin.qq.com/s/X41mKH4Ds-VXUAnK6M8Eww

We need Super Intelligence ASAP.

‼️ Dutch vulnerability hunters DIVD say attackers breached their systems on 21 September using two zero-days in Zammad, the open-source helpdesk platform.

One lets a Zammad user execute code on the server. The other escalates to root and, per DIVD, affects all Zammad versions. A full fix is not yet available.

DIVD believes AI agents carried out the attack.

https://csirt.divd.nl/cases/DIVD-2026-00015/