A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches One Product Isn’t the Problem: […

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

White House Network Appears in Global Residential Proxy Traffic

OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries

ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe

OpenAI Reports Covert Underperformance in GPT-6 Astra

UNM Health Shuts Clinics and Diverts Patients During Security Incident

Russian APT29 Targets Mobile Users with Watering Hole Attacks

U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog

U.S. Charges Canadian Man in Alleged Hack of University Supercomputers

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

NIS2 Makes Board Members Personally Liable for Access Control Decisions

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

VOLTA, the infostealer that asks an AI which victims are worth the effort

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

FBI Blames North Korea for $6 Billion Binance Crypto Theft

SMS of Death: Android under attack, an invisible SMS can block calls and emergency services

International Press – Newsletter

Cybercrime

How hackers broke into four of Canada’s top law firms, stole client files and caused chaos

Polymarket Pauses Trading as Prediction Market Investigates Security Incident

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

29 October Binance Security Incident: Initial Findings and Response Update     

“Black October” for AI Developer Platforms  

Canadian man extradited to the U.S. for his role in computer hacking scheme targeting universities  

ARTEX Exposed: Mapping the Infrastructure Behind the South Korean Bank Breaches

French bank Credit Mutuel Arkea says €100 million missing after cyberattack  

Malware

Shutting the Door on the XCPE Botnet  

Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles  

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data  

CWPdoor: The Invisible Backdoor Living Inside Control Web Panel  

Hacking

SMS of Death 

Chainalysis Security Incident Information  

Russia and Ukraine say emergency alert apps were hit by apparent cyber-attacks  

European supermarkets hit by new fridge cyber attack  

The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources

Securing Muse: More Than $1 Million in Bug Bounties Paid Out  

WorkOS October 30th, 2026 Data Security Incident  

A thousand fewer paths to root

ThisBash Escape: Claude Dispatch Flaw Enables Browser Extensions RCE on the OS 

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) 

Intelligence and Information Warfare  

North Korea Responsible for $6 Billion+ Binance Attack  

Russia funded Facebook and Twitter investments through Kushner investor

Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia

French blood banks hit alongside cyberattack on European supermarkets

UK and Germany to jointly develop military AI in 2027 

Apple threat notifications regarding Mercenary Spyware  

DarkBlinders: Inside an Active Espionage Campaign

Poisoned Source: APT29 watering holes target mobile devices with n-day exploits

Russian Federal State Statistics Service says it was hit by massive cyberattack — hackers steal 23TB of data, including Ukraine war casualty figures

The Google Whistleblower Taking on Big Tech Over Its Role in Gaza  

Weekly Wire #17: Hybrid war hits home  

Cybersecurity

Israeli startups raised at least $872 million in October, led by cybersecurity and AI 

Europe on alert after supermarket freezers hit by cyber-attacks in 10 countries  

Joint statement on cyber incidents in refrigeration systems across the EU  

GPT‑6 Cyber: Advancing the frontier of aligned cybersecurity agents

Residential Proxies Detected on White House Network  

European refrigerator controller redux: A new wave of refrigeration attacks

Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features       

Japan announces emergency cybersecurity package following a wave of attacks   

ThisBash Escape: Claude Dispatch Flaw Enables Browser Extensions RCE on the OS  

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Source: SecurityAffairs
Source Link: https://securityaffairs.com/202649/security/security-affairs-newsletter-round-603-by-pierluigi-paganini-international-edition.html