Security Affairs newsletter Round 600 by Pierluigi Paganini

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. International Press – Newsletter Leaked chats show Russian extortion gang sending ‘agents’ into US law firms GTA 6 leaker CyberLeek is now reportedly threatening to release a full, playable build of the game CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives Canonical Websites Disrupted in Second DDoS Attack This Year Canadian ransomware negotiator arrested amid FBI hacker crackdown Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI Ransomware gets personal: ‘We-know-where-you-are kind of stuff’ Malware IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime XWorm Reborn: From infostealer to surveillance platform Hirudo: From Fake Updates to Patched Banking Apps The campaign that never stopped: tracking GhostAction from 2025 to 2026 Malfex imgdecode npm native addon loader Hacking Hackers heat French supermarket fridges, sparking fires and spoiling food Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch Super Intelligence Reached OT Systems and Moved Equipment AI models may be capable of self-replicating without access to a datacenter A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days Vghost: Beyond the Privilege Boundary Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified Using a funded test cryptocurrency wallet without authorization Intelligence and Information Warfare Disrupting AI-enabled “false front” operations Britain steps up national defences against growing AI risks Russia’s Yandex bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple of ‘Russia’s Google’ data centers — Ukraine intensifies bombing of Yandex data centers in response to Moscow’s strikes on Kyiv data centers UK keeps AI safeguards in the maybe pile for Cyber Security BIll UAE faces over 800,000 cyberattacks daily: How the country is fighting back BREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTURE Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’ ARMORY CASTLE and BT26-05: What Security Teams Need to Know U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance Cybersecurity ‘123456’ password linked to Denmark data breach affecting 8.8M people AI Governance Is Being Decided Now, and the Public Isn’t in the Room The October 2026 Security Update Review Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability Millions of phones exposed to Israeli spyware operation through online ads, researchers say More than 1 million Texans affected by CenterPoint data breach, AG report shows US federal bankruptcy court operations disrupted by cybersecurity incident Follow me on Twitter: @securityaffairs and Facebook and Mastodon (SecurityAffairs – hacking, newsletter)