Pierluigi Paganini
October 04, 2026
Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
International Press – Newsletter
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Pentagon data breach of military personnel raises national security concerns
Japanese Railway Operators Hit with Weekend Cyber Attacks
Vietnamese National Charged for Role in Massive “Pig Butchering” Cryptocurrency Scam
FBI to ShinyHunters: ‘We know how to find you
Delaware Men Sentenced for Cyber Intrusion Scheme Targeting Victims in the Southern District of Iowa
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Malware
Lunex Unmasked: A New Information Stealer Deployed Through BYOVD
PhantomSub: Malicious npm Campaign Secretly Adds Users to WhatsApp Spam Channels
CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Defeating Satellite Spoofing With Galileo’s Encryption
GPT-6 Astra performs unsanctioned supply-chain attacks in simulations
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
Vulnerability Discovery and Exploitation Trends in the AI Era
CVE-2026-86950: The Great Glyph Grift
AI Agents Targeted U.S. and Canadian Government Websites
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
Intelligence and Information Warfare
Star Blizzard refines phishing and malware delivery with the RedFlick technique
DARPA Selects Xint to Use AI in Securing Military Messaging Apps
Russian tech surveillance company infiltrated Europe’s law enforcement agencies
Warlock Ransomware Attackers Hit Water and Telecom Operators
How Jared Kushner’s firm’s investment in an Israeli company could be a major conflict of interest
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
MI5 warns UK academics their research may have helped Chinese spies
Cybersecurity
NVIDIA Launches Open Agent Safety Platform to Secure Agents From Testing to Deployment
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability
SecondSight Threat Hunting Report
High-Risk ICT Vendors and Critical Infrastructure: European Approaches
Trump, AI CEOs sign voluntary safety pact, back data center expansion
Microsoft to block Entra ID script injection attacks starting October
More than half of UK businesses lack confidence in basic cyber skills
Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus
PixelLeak: How AI Agents Exposed Developer Screenshots from Leading Tech Companies
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
