MUST READ

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116

 | 

Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Rydox Admin Faces 20 Years After Selling Stolen Data and Fraud Tools

 | 

OpenAI Agents Accessed US Government Websites Without Authorization

 | 

Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem

 | 

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

 | 

U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

 | 

Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million

 | 

ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer

 | 

AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

 | 

U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog

 | 

Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison

 | 

AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS

 | 

OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research

 | 

CLOSEDQUORUM, the malware that asks four AI models what to do next

 | 

U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

 | 

F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

 | 

ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

 | 

EvilTokens made phishing-as-a-service look easy. Then it got taken down

 | 

Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini September 27, 2026

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

OpenAI Agents Accessed US Government Websites Without Authorization
Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
CLOSEDQUORUM, the malware that asks four AI models what to do next
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack
EvilTokens made phishing-as-a-service look easy. Then it got taken down
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
CVE-2026-87902: how close is your WordPress to remote code execution?
Check Point Fixes a New Actively Exploited Critical Security Flaw
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
Public PoC Exposes Critical Veeam Agent Privilege Escalation
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
Contagious Interview: 30,000 devices infected by a fake job interview
Google Fined €403 Million Over Location Data Practices
Foreign Hackers Target Two Colorado Water Utilities
ChainScript: the RAT that hides its command server inside a blockchain contract
A BYD Shark 6 Hack Shows the Risks of Connected Cars
The Target Is No Longer the Model. It’s the Agent.
UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns
U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
AI Hallucinations Nearly Triggered a US-China Military Confrontation

International Press – Newsletter

Cybercrime

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

Unmasking EvilTokens: Getting to the root of device code phishing

Consumer Protection Tuesday: Taking Down Evil Tokens

ShinyHunters hackers say they breached FBI, stole data on bureau employees  

Tech CEO, Russian National Arrested on Complaint Alleging They Hid Russian Ownership and Development of Software Sold to U.S. Government

How Romanian Crime Rings Are Draining U.S. Welfare Accounts  

An undercover Google analyst infiltrated a notorious supply-chain hacking gang    

Armenian National Extradited to the United States Sentenced to Federal Prison for Ransomware Extortion Scheme     

Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts  

Exploit.in: inside a Russian hacker forum, 2005 to 2008  

Kosovar National Pleads Guilty to Operating Cybercrime Marketplace Offering Tools and Products to Cybercriminals  

Malware

Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign  

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO  

Malicious npm campaign targets developers integrating Twilio

Graphalgo campaign spreads to Terraform providers and Go Modules     

Inside Corp MDM, the Android spyware targeting logistics companies     

ClickFix Malware Report  

Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud   

Hacking

We got a cybersecurity expert to hack this BYD. It was too easy  

UPDATE: Active Exploitation CVE-2026-32996 of Veeam Agent  

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity 

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

WordPress 7.1.2 Security Release: Unauthenticated LFI to RCE 

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day  

MikroTrick: technical analysis, disclosure process, and the use of LLM agents 

Top 10 attacks on Claude Code and what each one actually broke

Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day  

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Intelligence and Information Warfare  

Water Cyberattack Campaign 2026  

Exclusive: US military had close call after using AI for false intelligence report, sources say 

Foreign hackers breach two more US water utilities, threaten safety of Colorado residents  

North Korean “WaterPlum,” commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe   

Cybersecurity

Sensitive UK police data vulnerable to ‘compromise’ by US government and foreign actors  

ENISA Threat Landscape 2026 Breadcrumb Home Publications ENISA Threat Landscape 2026  

Data Protection Commission fines Google €403 million following Inquiry into Google’s processing of location data  

How AI could make it harder for governments to use hacking tools

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

Altman, Amodei Call for Global Cooperation on AI to Boost Safety

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

you might also like

Pierluigi Paganini September 27, 2026
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1
Read more
Pierluigi Paganini September 27, 2026
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116
Read more

leave a comment

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1

Artificial Intelligence / September 27, 2026

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116

Malware / September 27, 2026

Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

Breaking News / September 27, 2026

Rydox Admin Faces 20 Years After Selling Stolen Data and Fraud Tools

Uncategorized / September 27, 2026

OpenAI Agents Accessed US Government Websites Without Authorization

Artificial Intelligence / September 26, 2026