Cyber Dispatch™️

Pegasus infected a Serbian student movement member’s iPhone through a zero-click iMessage exploit. #TGITM

BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory.

SpaceXAI apologizes for outage that affected Grok and other 'compute partners'.

Pegasus and NoviSpy Used Against Serbian Protesters. #TGITM

HPE patches critical ArubaOS-CX remote code execution flaw.

Cisco searched for IOS XR bugs and found so many it rolled them into an update release.

Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs.

Discovery This issue was discovered by Jose Rodriguez and has already been reported to both Meta and Google. According to the Jose, it works on current Android versions.

Reduce the Risk

Fortunately, there is a simple mitigation you can apply today: Open Settings on your Android device. Go to Apps -> WhatsApp -> Permissions. Select Photos and Videos. Change the permission from full access to Limited access.

Most people assume that once their phone is locked, their photos are protected from anyone who picks up the device. However, a behavior discovered Jose Rodriguez shows that photos may be accessible during an incoming WhatsApp video call, even while the phone remains locked.

Legacy Lenovo login opens 5,000 Dropbox accounts to attackers.

TikTok all public endpoints reversed engineered. Scraped 5.94 billion TikTok videos and 3.23 billion profiles in 3 weeks.

New PackClient RAT sold on Telegram.

Claude Mythos only model to complete full cyber kill chain, experts say.

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells.

Mozilla rolls out ad blocking to Firefox for iOS.

Rooted in Trust: Three privilege-escalation vulnerabilities in HP Easy Start for macOS (CVE-2026-12554, CVE-2026-12555, CVE-2026-12556).

Microsoft will turn memory integrity on by default on more Windows 11 PCs from October 13, and it can slow games. Tom's Hardware measured games up to 15% slower with VBS and memory integrity on in 2023 and a since-deleted 2022 Microsoft post acknowledged a frame-rate cost in some games. Microsoft will start switching Memory Integrity (HVCI) on by default across eligible Windows 11 PCs, delivered through ordinary quality updates. Only verified kernel-mode code will load, blocking unsigned rootkits and raising the bar on driver-based kernel attacks.