Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini
September 27, 2026

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

International Press – Newsletter

Cybercrime

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

Unmasking EvilTokens: Getting to the root of device code phishing

Consumer Protection Tuesday: Taking Down Evil Tokens

ShinyHunters hackers say they breached FBI, stole data on bureau employees

Tech CEO, Russian National Arrested on Complaint Alleging They Hid Russian Ownership and Development of Software Sold to U.S. Government

How Romanian Crime Rings Are Draining U.S. Welfare Accounts

An undercover Google analyst infiltrated a notorious supply-chain hacking gang

Armenian National Extradited to the United States Sentenced to Federal Prison for Ransomware Extortion Scheme

Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts

Exploit.in: inside a Russian hacker forum, 2005 to 2008

Kosovar National Pleads Guilty to Operating Cybercrime Marketplace Offering Tools and Products to Cybercriminals

Malware

Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Malicious npm campaign targets developers integrating Twilio

Graphalgo campaign spreads to Terraform providers and Go Modules

Inside Corp MDM, the Android spyware targeting logistics companies

ClickFix Malware Report

Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud

Hacking

We got a cybersecurity expert to hack this BYD. It was too easy

UPDATE: Active Exploitation CVE-2026-32996 of Veeam Agent

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

WordPress 7.1.2 Security Release: Unauthenticated LFI to RCE

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day

MikroTrick: technical analysis, disclosure process, and the use of LLM agents

Top 10 attacks on Claude Code and what each one actually broke

Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Intelligence and Information Warfare

Water Cyberattack Campaign 2026

Exclusive: US military had close call after using AI for false intelligence report, sources say

Foreign hackers breach two more US water utilities, threaten safety of Colorado residents

North Korean “WaterPlum,” commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe

Cybersecurity

Sensitive UK police data vulnerable to ‘compromise’ by US government and foreign actors

ENISA Threat Landscape 2026 Breadcrumb Home Publications ENISA Threat Landscape 2026

Data Protection Commission fines Google €403 million following Inquiry into Google’s processing of location data

How AI could make it harder for governments to use hacking tools

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

Altman, Amodei Call for Global Cooperation on AI to Boost Safety

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts

Tags: Breaking News, Security

What do you feel about this?

Share on Facebook Share on Twitter Send via Email

Post navigation

Previous: Rydox Admin Faces 20 Years After Selling Stolen Data and Fraud Tools
Next: SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116