Skip to content
Security Affairs newsletter Round 600 by Pierluigi Paganini

Security Affairs newsletter Round 600 by Pierluigi Paganini

Securityaffairs • October 18, 2026

Security Affairs Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs , including international press.

International Press –

Leaked chats show Russian extortion gang sending ‘agents’ into US law firms

GTA 6 leaker CyberLeek is now reportedly threatening to release a full, playable build of the game

CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure

ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives

Canonical Websites Disrupted in Second DDoS Attack This Year

Canadian ransomware negotiator arrested amid FBI hacker crackdown

Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI

Ransomware gets personal: ‘We-know-where-you-are kind of stuff’

IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime

XWorm Reborn: From infostealer to surveillance platform

Hirudo: From Fake Updates to Patched Banking Apps

The campaign that never stopped: tracking GhostAction from 2025 to 2026

Malfex imgdecode npm native addon loader

Hackers heat French supermarket fridges, sparking fires and spoiling food

Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Super Intelligence Reached OT Systems and Moved Equipment

AI models may be capable of self-replicating without access to a datacenter

A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days

Vghost: Beyond the Privilege Boundary

Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified

Using a funded test cryptocurrency wallet without authorization

Intelligence and Information Warfare

Disrupting AI-enabled “false front” operations

Britain steps up national defences against growing AI risks

Russia’s Yandex bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple of ‘Russia’s Google’ data centers — Ukraine intensifies bombing of Yandex data centers in response to Moscow’s strikes on Kyiv data centers

UK keeps AI safeguards in the maybe pile for Cyber Security BIll

UAE faces over 800,000 cyberattacks daily: How the country is fighting back

Exposing AdFection How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware

BREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTURE

Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’

ARMORY CASTLE and BT26-05: What Security Teams Need to Know

Justice Department Announces Coordinated Actions to Combat North Korean Remote IT Worker Schemes Affecting More than 70 U.S. Companies

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

‘123456’ password linked to Denmark data breach affecting 8.8M people

AI Governance Is Being Decided Now, and the Public Isn’t in the Room

The October 2026 Security Update Review

Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Millions of phones exposed to Israeli spyware operation through online ads, researchers say

More than 1 million Texans affected by CenterPoint data breach, AG report shows

US federal bankruptcy court operations disrupted by cybersecurity incident

Follow me on Twitter: @securityaffairs and and Mastodon

( SecurityAffairs – hacking, )