Security Affairs newsletter Round 597 by Pierluigi Paganini

Security Affairs Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs , including international press.

International Press –

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

Unmasking EvilTokens: Getting to the root of device code phishing

Consumer Protection Tuesday: Taking Down Evil Tokens

ShinyHunters hackers say they breached FBI, stole data on bureau employees

Tech CEO, Russian National Arrested on Complaint Alleging They Hid Russian Ownership and Development of Software Sold to U.S. Government

How Romanian Crime Rings Are Draining U.S. Welfare Accounts

An undercover Google analyst infiltrated a notorious supply-chain hacking gang

Armenian National Extradited to the United States Sentenced to Federal Prison for Ransomware Extortion Scheme

Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts

Exploit.in: inside a Russian hacker forum, 2005 to 2008

Kosovar National Pleads Guilty to Operating Cybercrime Marketplace Offering Tools and Products to Cybercriminals

Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Malicious npm campaign targets developers integrating Twilio

Graphalgo campaign spreads to Terraform providers and Go Modules

Inside Corp MDM, the Android spyware targeting logistics companies

ClickFix Malware Report

Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud

We got a cybersecurity expert to hack this BYD. It was too easy

UPDATE: Active Exploitation CVE-2026-32996 of Veeam Agent

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

WordPress 7.1.2 Security Release: Unauthenticated LFI to RCE

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day

MikroTrick: technical analysis, disclosure process, and the use of LLM agents

Top 10 attacks on Claude Code and what each one actually broke

Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Intelligence and Information Warfare

Water Cyberattack Campaign 2026

Exclusive: US military had close call after using AI for false intelligence report, sources say

Foreign hackers breach two more US water utilities, threaten safety of Colorado residents

North Korean “WaterPlum,” commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe

Sensitive UK police data vulnerable to ‘compromise’ by US government and foreign actors

ENISA Threat Landscape 2026 Breadcrumb Publications ENISA Threat Landscape 2026

Data Protection Commission fines Google €403 million following Inquiry into Google’s processing of location data

How AI could make it harder for governments to use hacking tools

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

Altman, Amodei Call for Global Cooperation on AI to Boost Safety

Follow me on Twitter: @securityaffairs and and Mastodon

( SecurityAffairs – hacking, )