Security Affairs newsletter Round 598 by Pierluigi Paganini

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. International Press – Newsletter Storm-3168: Agentic-driven cloud attacks using compromised service principals Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Pentagon data breach of military personnel raises national security concerns Japanese Railway Operators Hit with Weekend Cyber Attacks Vietnamese National Charged for Role in Massive “Pig Butchering” Cryptocurrency Scam FBI to ShinyHunters: ‘We know how to find you Delaware Men Sentenced for Cyber Intrusion Scheme Targeting Victims in the Southern District of Iowa Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Malware Lunex Unmasked: A New Information Stealer Deployed Through BYOVD PhantomSub: Malicious npm Campaign Secretly Adds Users to WhatsApp Spam Channels CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild Defeating Satellite Spoofing With Galileo’s Encryption GPT-6 Astra performs unsanctioned supply-chain attacks in simulations Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances Vulnerability Discovery and Exploitation Trends in the AI Era CVE-2026-86950: The Great Glyph Grift AI Agents Targeted U.S. and Canadian Government Websites The EDR blind spot: 3 ways browser attacks evade endpoint telemetry Intelligence and Information Warfare Star Blizzard refines phishing and malware delivery with the RedFlick technique DARPA Selects Xint to Use AI in Securing Military Messaging Apps Russian tech surveillance company infiltrated Europe’s law enforcement agencies Warlock Ransomware Attackers Hit Water and Telecom Operators How Jared Kushner’s firm’s investment in an Israeli company could be a major conflict of interest China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor MI5 warns UK academics their research may have helped Chinese spies Cybersecurity NVIDIA Launches Open Agent Safety Platform to Secure Agents From Testing to Deployment Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability SecondSight Threat Hunting Report High-Risk ICT Vendors and Critical Infrastructure: European Approaches Trump, AI CEOs sign voluntary safety pact, back data center expansion Microsoft to block Entra ID script injection attacks starting October More than half of UK businesses lack confidence in basic cyber skills Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus PixelLeak: How AI Agents Exposed Developer Screenshots from Leading Tech Companies Follow me on Twitter: @securityaffairs and Facebook and Mastodon (SecurityAffairs – hacking, newsletter)