Pierluigi Paganini
October 18, 2026
Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
International Press – Newsletter
Leaked chats show Russian extortion gang sending ‘agents’ into US law firms
GTA 6 leaker CyberLeek is now reportedly threatening to release a full, playable build of the game
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives
Canonical Websites Disrupted in Second DDoS Attack This Year
Canadian ransomware negotiator arrested amid FBI hacker crackdown
Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI
Ransomware gets personal: ‘We-know-where-you-are kind of stuff’
Malware
IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime
XWorm Reborn: From infostealer to surveillance platform
Hirudo: From Fake Updates to Patched Banking Apps
The campaign that never stopped: tracking GhostAction from 2025 to 2026
Malfex imgdecode npm native addon loader
Hacking
Hackers heat French supermarket fridges, sparking fires and spoiling food
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Super Intelligence Reached OT Systems and Moved Equipment
AI models may be capable of self-replicating without access to a datacenter
A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
Vghost: Beyond the Privilege Boundary
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Using a funded test cryptocurrency wallet without authorization
Intelligence and Information Warfare
Disrupting AI-enabled “false front” operations
Britain steps up national defences against growing AI risks
Russia’s Yandex bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple of ‘Russia’s Google’ data centers — Ukraine intensifies bombing of Yandex data centers in response to Moscow’s strikes on Kyiv data centers
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
UAE faces over 800,000 cyberattacks daily: How the country is fighting back
BREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTURE
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
ARMORY CASTLE and BT26-05: What Security Teams Need to Know
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
Cybersecurity
‘123456’ password linked to Denmark data breach affecting 8.8M people
AI Governance Is Being Decided Now, and the Public Isn’t in the Room
The October 2026 Security Update Review
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Millions of phones exposed to Israeli spyware operation through online ads, researchers say
More than 1 million Texans affected by CenterPoint data breach, AG report shows
US federal bankruptcy court operations disrupted by cybersecurity incident
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
Intelligence / October 17, 2026
