Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

Capcom Data Breach Exposes 11.7 Million Email AddressesU.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalogPHP Warns of New Code Execution Flaw Days After PHP2Shell PatchesMeta Faces $25 Billion Penalty Linked to Cambridge Analytica ScandalCapcom Data Breach Exposes 11.7 Million Email AddressesU.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalogPHP Warns of New Code Execution Flaw Days After PHP2Shell PatchesMeta Faces $25 Billion Penalty Linked to Cambridge Analytica ScandalPHP2Shell: Millions of Attacks, No Confirmed Successful Exploits YetINTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime CrackdownMicrosoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEXSignal Vulnerability Could Keep Calls Alive After Users Hang UpPHP2Shell Attacks Started Four Days Before Public Disclosure, AWS ReportsFBI and CISA Warn of SafePay Ransomware Attacks on 600 OrganizationsRussian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by UkraineOpenAI Reports Two Incidents of AI Agents Disabling Their Own OversightUS Government Orders DeepSeek Out of Federal Civilian SystemsPHP Prepares Emergency Fixes for Two Critical Remote Code Execution FlawsNSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap ElectionsNikkei data breach affected over 1.8 million recordsGoogle Cloud Outage in London Disrupts Revolut Banking ServicesAfD Email Breach Exposes 421,000 Messages in Anonymous Online ArchiveMicrosoft Treats AI Agents as Insider Threats in New Security FrameworkPlex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto MinersMeta wants to scrape your website to train its AI, and you can’t say noDeepfakes and Election Manipulation: UK Watchdog Seeks Faster DetectionBig Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel FlawAttackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a PasswordRust-Based CikaBika Bot Turns Discord into a Command Center

International Press – Newsletter

Cybercrime

U.K. Sanctions Cryptomus for RU Money Laundering

Anonymous hackers claim to leak 421,179 internal emails from Germany’s Russia-aligned AfD

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

#StopRansomware: SafePay Ransomware

Cybercrime crackdown in Africa nets 1,462 arrests, recovers over USD 105 million

U.K. Sanctions Cryptomus for RU Money Laundering

Nigerian Man Sentenced To Eight Years For Hacking, Fraud, And Identity Theft Schemes

1 Million Impacted by Capcom Data Breach

Malware

Auditing the auditor: Unmasking Apex Accelerator

GhostAction Attack Escalates By Targeting GitHub Users

Plex vulnerabilities being exploited in the wild to drop a cryptominer

ROMULUS: Analysis of a New Multi-Payload ClickFix Delivery Platform

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

Hacking

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux

Plex2Shell Unauthenticated RCE in Plex Media Server

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD

Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Making attacking agents pay

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

PHP2Shell Exploit Tooling Found on Exposed Attacker Server

Intelligence and Information Warfare

TAG-193’s Regional Espionage Operations

ATT&CK v20: Critical Infrastructure Campaigns, Adversary Use and Abuse of AI, & Iranian Cyber Espionage

No to Palantir – Five Times

UK Election Watchdog Develops AI System to Flag Deepfakes Within 3 Hours

Pegasus and Mercenary Spyware Attacks on Serbian Pro-Democracy Figures

Russian satellite makes possibly unprecedented approach to another spacecraft without permission

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Operation FlashHole: Lazarus breaks security, defies control

Pegasus spyware founder urges governments to trust his tech and ditch US AI   <br>

Cybersecurity

Character.ai files for bankruptcy following lawsuits alleging ties to teen suicides

Cybersecurity Jobs Report 235,786

Agents are your newest insiders. Security must move at their speed

Google Cloud services face outage in London, Revolut services down too

Government websites go dark after AI-discovered flaw sparks security scramble

Widespread PHP Flaw May Cause Many Site Outages Today

Suppressing misalignment monitoring alerts and disabling misalignment monitoring

AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk

CVE-2026-113380 — RingRTC (Signal): Flooded Call Event Queue Blocks Local Hang-Up

Cellebrite’s Advanced Unlocks and the case of the missing iPhone 17

Meta ordered to pay $25 billion penalty to New Mexico in data privacy case

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

Our latest defenses against evolving web scams

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)