PCA Cyber Security uncovered four CVEs in OpenSynergy’s BlueSDK Bluetooth framework that enable a ‘PerfektBlue’ attack, letting an attacker pair over Bluetooth and take over infotainment systems in Mercedes‑Benz, Skoda and Volkswagen models. The flaws can expose location, audio and potentially vehicle controls, affecting millions of cars and other devices.
A CVSS 9.6 flaw in mcp-remote (CVE‑2025‑6514) lets any untrusted MCP server inject OS commands into clients, enabling full remote code execution. The bug spans versions 0.0.5‑0.1.15 and has been downloaded over 437,000 times, exposing a large swath of AI tool users to compromise.
Elastic Security Labs discovered that since April 2025, threat groups have been using the commercial evasion tool SHELLTER to bundle and deliver infostealers such as LUMMA, RHADAMANTHYS, and ARECHCLIENT2. The framework’s advanced anti‑analysis techniques let the payloads evade modern AV/EDR solutions, extending the attackers’ operational window.
A new variant of the Atomic macOS infostealer (AMOS) now ships a hidden backdoor that survives reboots and lets attackers run arbitrary commands on infected Macs. The backdoor, delivered via a hidden helper binary and a LaunchDaemon, could give threat actors persistent control over thousands of macOS devices, especially those handling cryptocurrency.
Researchers at Huntress reverse‑engineered MacSync, a new macOS malware family that uses a counterfeit Claude AI install page to trick users into running a curl command. The loader unfolds a six‑stage chain that steals browser credentials, keychain secrets, crypto wallets and installs a native RAT, bypassing Gatekeeper and demanding full‑disk access.
In July 2026 Amgen discovered unauthorized activity in third‑party cloud environments, leading to theft of protected health information and proprietary corporate data. The company filed a Form 8‑K with the SEC, noting the breach but saying it does not expect material financial impact. This highlights risks of relying on external cloud providers for sensitive biotech data.
You’re caught up.
That was all 6 stories in the 2 August issue.