Pierluigi Paganini
June 21, 2026
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
International Press – Newsletter
The Gentlemen ransomware: 483 victims and a leaked playbook
iRhythm Confirms Data Stolen in Hack
Who Runs the Ransomware Group ‘The Gentlemen?’
Novo Nordisk hit by FulcrumSec: the stealer logs saw it coming
FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
International law enforcement initiate hunt on malware group SocGholish
Killing me gently: Inside Gentlemen’s EDR killer framework
Malware
OptinMonster supply chain attack hits 1.2 million sites
Rokarolla : Android Banker with Complete Device Takeover Capabilities
WordPress PBN Plugin Drops Dual Webshells via Database Injection
Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk
Crypto Clipper uses Tor and worm-like propagation for persistence and control
Sayonara, SocGholish: Operation Endgame Disrupts Major Cybercrime Operation
Hacking
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale
FortiBleed — 75k Fortinet firewalls have admin passwords cracked
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
SocGholish Compromised WordPress Sites Special Report
1.16 billion attacks: how the FortiBleed crew broke FortiGate
Intelligence and Information Warfare
Analysis of APT37 NarwhalRAT Leveraging MS-Themed Phishing and Dead-drop C2
Don’t Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency
FishMonger’s arsenal upgraded: SprySOCKS for Windows
White House’s export limits on Anthropic linked to concerns about Chinese access
Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society
French president urges US to share cutting-edge AI and democracies to cooperate on regulation
Cybersecurity
IT security incident at Novo Nordisk
Maine closes data breach portal to the public after fake reports
How we’re combatting AI scams with security, legislation and more
UK to ban social media access for children under 16
We Audited the Same Codebase with Claude Opus 4.8 and MiniMax M3
CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
