Pierluigi Paganini
October 25, 2026
Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
International Press – Newsletter
U.K. Sanctions Cryptomus for RU Money Laundering
Anonymous hackers claim to leak 421,179 internal emails from Germany’s Russia-aligned AfD
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
#StopRansomware: SafePay Ransomware
Cybercrime crackdown in Africa nets 1,462 arrests, recovers over USD 105 million
U.K. Sanctions Cryptomus for RU Money Laundering
Nigerian Man Sentenced To Eight Years For Hacking, Fraud, And Identity Theft Schemes
1 Million Impacted by Capcom Data Breach
Malware
Auditing the auditor: Unmasking Apex Accelerator
GhostAction Attack Escalates By Targeting GitHub Users
Plex vulnerabilities being exploited in the wild to drop a cryptominer
ROMULUS: Analysis of a New Multi-Payload ClickFix Delivery Platform
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
Hacking
ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks
One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux
Plex2Shell Unauthenticated RCE in Plex Media Server
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
PHP2Shell Exploit Tooling Found on Exposed Attacker Server
Intelligence and Information Warfare
TAG-193’s Regional Espionage Operations
UK Election Watchdog Develops AI System to Flag Deepfakes Within 3 Hours
Pegasus and Mercenary Spyware Attacks on Serbian Pro-Democracy Figures
Russian satellite makes possibly unprecedented approach to another spacecraft without permission
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Operation FlashHole: Lazarus breaks security, defies control
Pegasus spyware founder urges governments to trust his tech and ditch US AI
Cybersecurity
Character.ai files for bankruptcy following lawsuits alleging ties to teen suicides
Cybersecurity Jobs Report 235,786
Agents are your newest insiders. Security must move at their speed
Google Cloud services face outage in London, Revolut services down too
Government websites go dark after AI-discovered flaw sparks security scramble
Widespread PHP Flaw May Cause Many Site Outages Today
Suppressing misalignment monitoring alerts and disabling misalignment monitoring
AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk
CVE-2026-113380 — RingRTC (Signal): Flooded Call Event Queue Blocks Local Hang-Up
Cellebrite’s Advanced Unlocks and the case of the missing iPhone 17
Meta ordered to pay $25 billion penalty to New Mexico in data privacy case
PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
Our latest defenses against evolving web scams
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
