Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.
Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
North Korean IT Workers Used Stolen US Identities to Earn $3 Million
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
Burger King Japan Data Breach Impacted 11 Million Customers
F5 addressed critical RCE flaws in NGINX
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected
U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog
Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog
Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates
Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges
Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
Anthropic Shows How Small AI Models Could Replicate Across IoT Devices
GitLab Patches Max-Severity Vulnerability CVE-2026-97229
Hackers cranked French supermarkets’ freezers up to 50 degrees, causing hundreds of stores to lose their stock
ShinyHunters arrest number three: a Canadian ransomware negotiator
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records
GTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full Game
Bitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
International Press – Newsletter
Cybercrime
Leaked chats show Russian extortion gang sending ‘agents’ into US law firms
GTA 6 leaker CyberLeek is now reportedly threatening to release a full, playable build of the game
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives
Canonical Websites Disrupted in Second DDoS Attack This Year
Canadian ransomware negotiator arrested amid FBI hacker crackdown
Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI
Ransomware gets personal: ‘We-know-where-you-are kind of stuff’
Malware
IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime
XWorm Reborn: From infostealer to surveillance platform
Hirudo: From Fake Updates to Patched Banking Apps
The campaign that never stopped: tracking GhostAction from 2025 to 2026
Malfex imgdecode npm native addon loader
Hacking
Hackers heat French supermarket fridges, sparking fires and spoiling food
Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Super Intelligence Reached OT Systems and Moved Equipment
AI models may be capable of self-replicating without access to a datacenter
A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
Vghost: Beyond the Privilege Boundary
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Using a funded test cryptocurrency wallet without authorization
Intelligence and Information Warfare
Disrupting AI-enabled “false front” operations
Britain steps up national defences against growing AI risks
Russia’s Yandex bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple of ‘Russia’s Google’ data centers — Ukraine intensifies bombing of Yandex data centers in response to Moscow’s strikes on Kyiv data centers
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
UAE faces over 800,000 cyberattacks daily: How the country is fighting back
Exposing AdFection How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware
BREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTURE
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
ARMORY CASTLE and BT26-05: What Security Teams Need to Know
Justice Department Announces Coordinated Actions to Combat North Korean Remote IT Worker Schemes Affecting More than 70 U.S. Companies
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
Cybersecurity
‘123456’ password linked to Denmark data breach affecting 8.8M people
AI Governance Is Being Decided Now, and the Public Isn’t in the Room
The October 2026 Security Update Review
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Millions of phones exposed to Israeli spyware operation through online ads, researchers say
More than 1 million Texans affected by CenterPoint data breach, AG report shows
US federal bankruptcy court operations disrupted by cybersecurity incident
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
Pierluigi Paganini
( SecurityAffairs – hacking, newsletter )
About Author
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Tags: Breaking News , Cybercrime , data breach , hacking , hacking news , information security news , IT Information Security , Malware , Newsletter , Pierluigi Paganini , Security , Security Affairs , Security News
0%
Love
0%
Funny
0%
Wow
0%
Sad
0%
Angry
Post navigation
October 18, 2026
