A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Capcom Data Breach Exposes 11.7 Million Email Addresses U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known […

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

Capcom Data Breach Exposes 11.7 Million Email Addresses

U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches

Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal

Capcom Data Breach Exposes 11.7 Million Email Addresses

U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches

Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal

PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet

INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown

Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX

Signal Vulnerability Could Keep Calls Alive After Users Hang Up

PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports

FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations

Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine

OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight

US Government Orders DeepSeek Out of Federal Civilian Systems

PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws

NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections

Nikkei data breach affected over 1.8 million records

Google Cloud Outage in London Disrupts Revolut Banking Services

AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive

Microsoft Treats AI Agents as Insider Threats in New Security Framework

Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners

Meta wants to scrape your website to train its AI, and you can’t say no

Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection

Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw

Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365

Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited

16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

Rust-Based CikaBika Bot Turns Discord into a Command Center

International Press – Newsletter

Cybercrime

U.K. Sanctions Cryptomus for RU Money Laundering

Anonymous hackers claim to leak 421,179 internal emails from Germany’s Russia-aligned AfD

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

#StopRansomware: SafePay Ransomware     

Cybercrime crackdown in Africa nets 1,462 arrests, recovers over USD 105 million  

U.K. Sanctions Cryptomus for RU Money Laundering

Nigerian Man Sentenced To Eight Years For Hacking, Fraud, And Identity Theft Schemes  

1 Million Impacted by Capcom Data Breach  

Malware

Auditing the auditor: Unmasking Apex Accelerator

GhostAction Attack Escalates By Targeting GitHub Users      

Plex vulnerabilities being exploited in the wild to drop a cryptominer

ROMULUS: Analysis of a New Multi-Payload ClickFix Delivery Platform

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

Hacking

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks  

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux 

Plex2Shell Unauthenticated RCE in Plex Media Server  

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD 

Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Making attacking agents pay  

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot  

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)  

PHP2Shell Exploit Tooling Found on Exposed Attacker Server 

Intelligence and Information Warfare  

TAG-193’s Regional Espionage Operations

ATT&CK v20: Critical Infrastructure Campaigns, Adversary Use and Abuse of AI, & Iranian Cyber Espionage

No to Palantir – Five Times  

UK Election Watchdog Develops AI System to Flag Deepfakes Within 3 Hours  

Pegasus and Mercenary Spyware Attacks on Serbian Pro-Democracy Figures  

Russian satellite makes possibly unprecedented approach to another spacecraft without permission  

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise  

Operation FlashHole: Lazarus breaks security, defies control

Pegasus spyware founder urges governments to trust his tech and ditch US AI   
  

Cybersecurity

Character.ai files for bankruptcy following lawsuits alleging ties to teen suicides  

Cybersecurity Jobs Report 235,786  

Agents are your newest insiders. Security must move at their speed  

Google Cloud services face outage in London, Revolut services down too  

Government websites go dark after AI-discovered flaw sparks security scramble  

Widespread PHP Flaw May Cause Many Site Outages Today

Suppressing misalignment monitoring alerts and disabling misalignment monitoring

AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk  

CVE-2026-113380 — RingRTC (Signal): Flooded Call Event Queue Blocks Local Hang-Up

Cellebrite’s Advanced Unlocks and the case of the missing iPhone 17  

Meta ordered to pay $25 billion penalty to New Mexico in data privacy case  

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

Our latest defenses against evolving web scams  

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Source: SecurityAffairs
Source Link: https://securityaffairs.com/201698/breaking-news/security-affairs-newsletter-round-601-by-pierluigi-paganini-international-edition.html