OS Security Affairs CVE-2026-97229 ↗

Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

Oct 18, 2026, 08:37 AM · by Security Affairs

Authoritative NVD/CISA vulnerability data (read-only)

CVE-2026-97229 ↗

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

North Korean IT Workers Used Stolen US Identities to Earn $3 MillionU.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalogBAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a WeekAI Agents Accessed Indian Organizations Without Authorization, CERT-In WarnsBurger King Japan Data Breach Impacted 11 Million CustomersF5 addressed critical RCE flaws in NGINXU.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalogPEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManagerCenterPoint Energy Data Breach: More Than 1 Million Texans AffectedU.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalogSilent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and GovernmentAdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware NetworksCisco Urges Customers to Patch Email Gateway Flaw and Check for CompromiseHirudo Android Trojan Replaces Banking Apps to Steal CredentialsU.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalogMicrosoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 UpdatesHidden Audio Recorder Found at OpenAI as Employee Faces Federal ChargesVolexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day VulnerabilitiesHow a leaked builder of XWorm turned a remote access trojan into a surveillance kitU.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalogAnthropic Shows How Small AI Models Could Replicate Across IoT DevicesGitLab Patches Max-Severity Vulnerability CVE-2026-97229Hackers cranked French supermarkets’ freezers up to 50 degrees, causing hundreds of stores to lose their stockShinyHunters arrest number three: a Canadian ransomware negotiatorCanonical Hit by Second DDoS Attack in 2026, Public Websites DisruptedSonicWall Patches CVSS 10.0 SSRF Flaw as Attacks BeginCyberXero Used 51 AI Agents to Steal 628,000 Ukrainian RecordsGTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full GameBitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countriesU.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog

International Press – Newsletter

Cybercrime

Leaked chats show Russian extortion gang sending ‘agents’ into US law firms

GTA 6 leaker CyberLeek is now reportedly threatening to release a full, playable build of the game

CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure

ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives

Canonical Websites Disrupted in Second DDoS Attack This Year

Canadian ransomware negotiator arrested amid FBI hacker crackdown

Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI

Ransomware gets personal: ‘We-know-where-you-are kind of stuff’

Malware

IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime

XWorm Reborn: From infostealer to surveillance platform

Hirudo: From Fake Updates to Patched Banking Apps

The campaign that never stopped: tracking GhostAction from 2025 to 2026

Malfex imgdecode npm native addon loader

Hacking

Hackers heat French supermarket fridges, sparking fires and spoiling food

Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Super Intelligence Reached OT Systems and Moved Equipment

AI models may be capable of self-replicating without access to a datacenter

A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days

Vghost: Beyond the Privilege Boundary

Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified

Using a funded test cryptocurrency wallet without authorization

Intelligence and Information Warfare

Disrupting AI-enabled “false front” operations

Britain steps up national defences against growing AI risks

Russia’s Yandex bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple of ‘Russia’s Google’ data centers — Ukraine intensifies bombing of Yandex data centers in response to Moscow’s strikes on Kyiv data centers

UK keeps AI safeguards in the maybe pile for Cyber Security BIll

UAE faces over 800,000 cyberattacks daily: How the country is fighting back

Exposing AdFection How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware

BREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTURE

Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’

ARMORY CASTLE and BT26-05: What Security Teams Need to Know

Justice Department Announces Coordinated Actions to Combat North Korean Remote IT Worker Schemes Affecting More than 70 U.S. Companies

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

Cybersecurity

‘123456’ password linked to Denmark data breach affecting 8.8M people

AI Governance Is Being Decided Now, and the Public Isn’t in the Room

The October 2026 Security Update Review

Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Millions of phones exposed to Israeli spyware operation through online ads, researchers say