HeadFlash

Daily tech-news flash

AI, privacy and security, caught up in five minutes.

A short email and matching podcast for each niche you pick, every weekday — what moved, why it matters, and where to read the full story. No noise, no hype.

Your niches

By subscribing you agree to receive the HeadFlash newsletter and accept our Privacy Policy. We use double opt-in — confirm via the email we send; unsubscribe anytime.

01

AI

  1. AI agents stole 600,000 cards for $25 per retailer Three open-source agent frameworks, 105 attack projects in six days, and a marginal cost of about $25 per hacked retailer.
  2. Australia says OpenAI agent breached Medicare portal Canberra presses OpenAI over a June Medicare portal breach, as Anthropic's Claude finds a Crispr-like enzyme and Google launches new voice models.
  3. Anthropic launches Claude Opus 5.5 as OpenAI ships GPT-6 Sol and Luna Anthropic and OpenAI trade same-day model launches, with Opus 5.5 undercutting prices and GPT-6 Sol and Luna targeting cheaper tiers.
  4. British Columbia sues OpenAI over Tumbler Ridge school shooting BC takes OpenAI to court over the Tumbler Ridge shooting, while a UN panel warns AI agents may escape human control and a git flaw hits four coding agents.
  5. Pentagon AI report nearly triggered China boarding; Palantir linked to Iran school strike A bogus AI intelligence report almost sparked a military confrontation, while a Pentagon review ties Palantir's Maven to a deadly strike on an Iranian school.
More AI
02

Privacy

  1. TikTok Pays £12.7m UK Child Privacy Fine as EU Warns on Quantum Threat TikTok drops its appeal and pays a £12.7m UK fine over children's data, while EU supervisors warn quantum computers could break today's encryption.
  2. Senate hearing targets Flock Safety as wrongful arrest and 240 misuse cases surface Flock's CEO skipped a Senate hearing where a wrongly jailed woman testified, researchers reported 240 ALPR misuse incidents and exposed cameras.
  3. Seattle Bans Algorithmic Grocery Pricing as Sweden Fines Miljödata Seattle becomes the first US city to ban algorithmic grocery pricing, while Sweden fines Miljödata $183,000 over a breach affecting 2.2 million people.
  4. Google fined $462M in Ireland as BYD scrubs China from privacy policy Google owes Ireland $462M over location tracking, BYD quietly rewrites its Australian privacy policy, and cheap smart glasses leak user data.
  5. OpenAI Cookie Links ChatGPT Accounts to Browsing on 936 Ad Pixels OpenAI's ad collector ties your ChatGPT account to what you do on Chewy, Wayfair and hundreds of other sites, while Reform UK pledges to scrap GDPR.
More Privacy
03

Security

  1. RSA signatures forged in 1,380 core-years via HSM oracle Researchers forged 1024-bit RSA signatures without factoring the key, and Iran-linked CHOSEN BRICK spyware targeted dissidents in a joint US-UK-Dutch alert.
  2. ShinyHunters claims FBI breach via Oracle zero-day, 3TB stolen ShinyHunters says it hacked the FBI through an unpatched Oracle PeopleSoft zero-day, stole up to 3TB, and defaced the FBI jobs site.
  3. vCenter zero-day chain lets attackers forge admin logins without a password Two CVSS 9.8 vCenter flaws, one exploited in the wild, plus 474 still-valid leaked GitHub App keys and a Gemini-powered malware implant.
  4. CISA orders urgent patching of three exploited Linux kernel flaws A 14-year-old kernel race condition, an ebtables out-of-bounds write and a kTLS logic flaw are under active attack, with federal fixes due today.
  5. Check Point RCE, Docker escape, 30,000 WaterPlum devices hit Check Point patches a critical root RCE, Docker fixes a Mac sandbox escape, and North Korea's WaterPlum breached 30,000 devices in 100+ countries.
More Security