Security Affairs newsletter Round 604 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 604 by Pierluigi Paganini – INTERNATIONAL EDITION
Pierluigi Paganini
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.
Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog
North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure
Gootloader Malware Disrupted After Infecting 25,000 Computers
Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell
New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections
The School Bomb Threats Came From Accounts Already in Stolen Data
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services
Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability
Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation
Poland takes its national e-government platform offline after a cyberattack
AI Pentest Tool AntiFox Abused To Steal AWS Credentials
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data
Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets
Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws
U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog
Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room
iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix
Google fixes the eighth actively exploited Chrome zero-day of 2026
Iris Ohyama data breach may expose personal information of 7.7 million people
France Blames Iran for the Supermarket Fridge Attacks
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
The BBC has a plan for a Black Sky event, and it runs on FM radio
Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa
International Press – Newsletter
Cybercrime
Maersk Probes Ransomware Claim Tied to Legacy System
Idaho Man Sentenced to 18 Years in Prison for Attempting to Provide Material Support to ISIS in Plot to Attack Churches
2026-11-10: Antifox Agentic Pentesting Platform Used to Steal AWS Credentials and Move Laterally in Compromised Environments
School Bomb Threats: Hudson Rock Finds Reported Sender Accounts in Infostealer Data
Gootloader Malware Disrupted in International Cyber Operation
Justice Department Announces Actions to Disrupt North Korea’s Massive Theft of Cryptocurrency
North Korean Hackers Use Secretly Recorded Webcam Library of 900+ Tech Workers in $400M “FaceStealer” Crypto Theft Scheme
Russian Cyberattackers Hit Expedia—Claiming Nearly A Billion Traveler Records Exposed
2013 breach at Russian cybercrime forum resurfaces with millions of victims’ credentials
Cyberattack: Maileva, a subsidiary of the La Poste group, announces a data breach affecting 22 million people
*** Ledger’s Response to the Hardware Implant Attack
Malware
Inside an AhsayCBS Intrusion: Hidden Webshells, a CryptoMiner, and a C2 Implant
Remus Stealer Markets Persistent Gmail Access: Hudson Rock Investigates
ScreenConnect Attack: SCKit Turns Remote Support Into an Attack Platform
wfx: GitHub Actions Credential Stealer Hits 8,000 Repos
When Everything Becomes Open-Source
Hacking
QNAP says hackers breaching NAS devices in Plex2Shell attacks
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
SignDrop Windows Common Log FileSystem Authentication 0day Local Privilege Escalation Vulnerability
Digging into HTML to find more elements and event handlers for XSS attacks
Mior: Breaking AMD SEV-SNP with Device-as-Memory
PHP2Shell Exploitation on Check Point Gateway
Trusted by Default: Qubole Cross-Account Access Abused in the Wild
Cursor An update on our recent security incident
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
Intelligence and Information Warfare
What happens if all the lights go out? This is the plan for a ‘Black Sky’ event
Operation Snowball: Inside an Autonomous AI Intrusion Campaign
Nvidia’s Jensen Huang admits to affair after allegations of relationship with Chinese spy
BOSSAI: Inside the AI attack mesh that targeted Taiwan’s emergency services
Destabilization and sabotage campaigns carried out against French interests by the Islamic Republic of Iran
G7 attention turns to Ukraine while US-mediated talks get underway in Abu Dhabi
Exchange for breakfast: Turla’s Cereal tricks are not for kids
Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe
Spied on by governments with Israeli spyware: in Europe, no one pays the price
German parliament passes law giving spy agencies hacking, sabotage powers
North Korea is minting meme coins to launder the Binance hack
School bomb threats: What stolen credentials and Telegram reveal
The Enemy Within. Tracking LIMINAL PANDA and SilentAir through Mobile Networks
Cybersecurity
US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
Cyber incidents in Japan
France accuses Iran’s Guards of cyberattacks on supermarket fridges
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
The November 2026 Security Update Review
Microsoft 365, Outlook down for thousands of US users, Downdetector shows
Docaposte confirms the theft of addresses belonging to 22 million French people following a cyberattack at this subsidiary of La Poste
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
Pierluigi Paganini
( SecurityAffairs – hacking, newsletter )
About Author
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Tags: Breaking News , Cybercrime , data breach , hacking , hacking news , information security news , IT Information Security , Malware , Newsletter , Pierluigi Paganini , Security , Security Affairs , Security News
0%
Love
0%
Funny
0%
Wow
0%
Sad
0%
Angry
Post navigation
November 15, 2026
