Security Affairs newsletter Round 601 by Pierluigi Paganini

Security Affairs Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs , including international press.

International Press –

U.K. Sanctions Cryptomus for RU Money Laundering

Anonymous hackers claim to leak 421,179 internal emails from Germany’s Russia-aligned AfD

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

#StopRansomware: SafePay Ransomware

Cybercrime crackdown in Africa nets 1,462 arrests, recovers over USD 105 million

U.K. Sanctions Cryptomus for RU Money Laundering

Nigerian Man Sentenced To Eight Years For Hacking, Fraud, And Identity Theft Schemes

1 Million Impacted by Capcom Data Breach

Auditing the auditor: Unmasking Apex Accelerator

GhostAction Attack Escalates By Targeting GitHub Users

Plex vulnerabilities being exploited in the wild to drop a cryptominer

ROMULUS: Analysis of a New Multi-Payload ClickFix Delivery Platform

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux

Plex2Shell Unauthenticated RCE in Plex Media Server

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD

Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Making attacking agents pay

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

PHP2Shell Exploit Tooling Found on Exposed Attacker Server

Intelligence and Information Warfare

TAG-193’s Regional Espionage Operations

ATT&CK v20: Critical Infrastructure Campaigns, Adversary Use and Abuse of AI, & Iranian Cyber Espionage

No to Palantir – Five Times

UK Election Watchdog Develops AI System to Flag Deepfakes Within 3 Hours

Pegasus and Mercenary Spyware Attacks on Serbian Pro-Democracy Figures

Russian satellite makes possibly unprecedented approach to another spacecraft without permission

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Operation FlashHole: Lazarus breaks security, defies control

Pegasus spyware founder urges governments to trust his tech and ditch US AI

Character.ai files for bankruptcy following lawsuits alleging ties to teen suicides

Cybersecurity Jobs Report 235,786

Agents are your newest insiders. Security must move at their speed

Google Cloud services face outage in London, Revolut services down too

Government websites go dark after AI-discovered flaw sparks security scramble

Widespread PHP Flaw May Cause Many Site Outages Today

Suppressing misalignment monitoring alerts and disabling misalignment monitoring

AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk

CVE-2026-113380 — RingRTC (Signal): Flooded Call Event Queue Blocks Local Hang-Up

Cellebrite’s Advanced Unlocks and the case of the missing iPhone 17

Meta ordered to pay $25 billion penalty to New Mexico in data privacy case

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

Our latest defenses against evolving web scams

Follow me on Twitter: @securityaffairs and and Mastodon

( SecurityAffairs – hacking, )