Pierluigi Paganini
March 01, 2026
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
International Press – Newsletter
AI-augmented threat actor accesses FortiGate devices at scale
‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA
Olympique Marseille confirms ‘attempted’ cyberattack after data leak
Malware
Arkanix Stealer: a C++ & Python infostealer
New Malicious npm Package “ambar-src” Targets Developers with Open Source Malware
New Dohdoor malware campaign targets education and health care
Exploring Aeternum C2: a new botnet that lives on the blockchain
Hacking
VShell and SparkRAT Observed in Exploitation of BeyondTrust Critical Vulnerability (CVE-2026-1731)
Active exploitation of Cisco Catalyst SD-WAN by UAT-8616
datapizza-ai, Yet Another Vulnerable AI Framework
Caught in the Hook: RCE and API Token Exfiltration Through Claude Code
Check Point Researchers Expose Critical Claude Code Flaws
Large Reasoning Models Are Autonomous Jailbreak Agents
Millions of Publicly Exposed .env Files Put Internet Services at Risk: A Mysterium VPN Research
MalTool: Malicious Tool Attacks on LLM Agents
Intelligence and Information Warfare
Cellebrite cut off Serbia citing abuse of its phone unlocking tools. Why not others?
Russia stepping up hybrid attacks, preparing for long standoff with West, Dutch intelligence warns
Operation Olalampo: Inside MuddyWater’s Latest Campaign
Operation MacroMaze: new APT28 campaign using basic tooling and legit infrastructure
North Korean Lazarus Group Now Working With Medusa Ransomware
Treasury Sanctions Exploit Broker Network for Theft and Sale of U.S. Government Cyber Tools
Mercenary Akula Hits Ukraine-Supporting Financial Institution
Ukraine says cyberattacks on energy grid now used to guide missile strikes
Exposing the Undercurrent: Disrupting the GRIDTIDE Global Cyber Espionage Campaign
APT37 Adds New Capabilities for Air-Gapped Networks
Cybersecurity
Making frontier cybersecurity capabilities available to defenders
CERT EU – Cyber Threat Intelligence Framework
FBI agents visited my home about an article I wrote, and now I can’t go to Mexico
European DYI chain ManoMano data breach impacts 38 million customers
Exclusive: US orders diplomats to fight data sovereignty initiatives
CrowdStrike says attackers are moving through networks in under 30 minutes
Apple iPhone and iPad Cleared for Classified NATO Use
Canadian Tire Corporation E-Commerce Data Incident
Anthropic refuses Pentagon’s demand in AI safeguards dispute
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
