Security Affairs newsletter Round 597 by Pierluigi Paganini

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. International Press – Newsletter ShinyHunters hacks Clop leak site, threatens to extort ransomware gang Unmasking EvilTokens: Getting to the root of device code phishing Consumer Protection Tuesday: Taking Down Evil Tokens ShinyHunters hackers say they breached FBI, stole data on bureau employees How Romanian Crime Rings Are Draining U.S. Welfare Accounts An undercover Google analyst infiltrated a notorious supply-chain hacking gang Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts Exploit.in: inside a Russian hacker forum, 2005 to 2008 Malware Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO Malicious npm campaign targets developers integrating Twilio Graphalgo campaign spreads to Terraform providers and Go Modules Inside Corp MDM, the Android spyware targeting logistics companies Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud Hacking We got a cybersecurity expert to hack this BYD. It was too easy UPDATE: Active Exploitation CVE-2026-32996 of Veeam Agent Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor WordPress 7.1.2 Security Release: Unauthenticated LFI to RCE Critical F5 BIG-IP Vulnerability Exploited as Zero-Day MikroTrick: technical analysis, disclosure process, and the use of LLM agents Top 10 attacks on Claude Code and what each one actually broke Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure Intelligence and Information Warfare Water Cyberattack Campaign 2026 Exclusive: US military had close call after using AI for false intelligence report, sources say Foreign hackers breach two more US water utilities, threaten safety of Colorado residents Cybersecurity Sensitive UK police data vulnerable to ‘compromise’ by US government and foreign actors ENISA Threat Landscape 2026 Breadcrumb Home Publications ENISA Threat Landscape 2026 How AI could make it harder for governments to use hacking tools OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files Altman, Amodei Call for Global Cooperation on AI to Boost Safety Follow me on Twitter: @securityaffairs and Facebook and Mastodon (SecurityAffairs – hacking, newsletter)