Back Securityaffairs Security Affairs newsletter Round 598 by Pierluigi Paganini
Security Affairs Round 598 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs has arrived! Every week, the best security articles from Security Affairs are free in your email box.
Enjoy a new round of the weekly SecurityAffairs , including international press.
International Press –
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Former U.S. Soldier Sentenced for Hacking and Extortion Scheme That Exposed Sensitive Data of U.S. Government Official
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Pentagon data breach of military personnel raises national security concerns
Japanese Railway Operators Hit with Weekend Cyber Attacks
Vietnamese National Charged for Role in Massive “Pig Butchering” Cryptocurrency Scam
FBI to ShinyHunters: ‘We know how to find you
Delaware Men Sentenced for Cyber Intrusion Scheme Targeting Victims in the Southern District of Iowa
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site
Lunex Unmasked: A New Information Stealer Deployed Through BYOVD
Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties
PhantomSub: Malicious npm Campaign Secretly Adds Users to WhatsApp Spam Channels
CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Defeating Satellite Spoofing With Galileo’s Encryption
GPT-6 Astra performs unsanctioned supply-chain attacks in simulations
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
Vulnerability Discovery and Exploitation Trends in the AI Era
CVE-2026-86950: The Great Glyph Grift
Rogue Agents Investigation
AI Agents Targeted U.S. and Canadian Government Websites
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
Intelligence and Information Warfare
Star Blizzard refines phishing and malware delivery with the RedFlick technique
DARPA Selects Xint to Use AI in Securing Military Messaging Apps
Russian tech surveillance company infiltrated Europe’s law enforcement agencies
Warlock Ransomware Attackers Hit Water and Telecom Operators
Tech CEO, Russian National Arrested on Complaint Alleging They Hid Russian Ownership and Development of Software Sold to U.S. Government
How Jared Kushner’s firm’s investment in an Israeli company could be a major conflict of interest
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
MI5 warns UK academics their research may have helped Chinese spies
NVIDIA Launches Open Agent Safety Platform to Secure Agents From Testing to Deployment
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability
SecondSight Threat Hunting Report
High-Risk ICT Vendors and Critical Infrastructure: European Approaches
Trump, AI CEOs sign voluntary safety pact, back data center expansion
Microsoft to block Entra ID script injection attacks starting October
More than half of UK businesses lack confidence in basic cyber skills
Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus
PixelLeak: How AI Agents Exposed Developer Screenshots from Leading Tech Companies
Follow me on Twitter: @securityaffairs and and Mastodon
( SecurityAffairs – hacking, )
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
