Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.

Crooks Are Buying Your Expired Domains and Using Them to Deliver MalwareSAP Commerce Cloud CVE-2026-58231 Exploited in the WildmacOS Screen Sharing Flaw Exploited to Deploy Monero MinersGeoServer Zero-Day Is Already Being Probed. That’s the ProblemApple warned hundreds of users of mercenary spyware attacksAmnesiaStealer Gives Attackers Live Control of Victims’ macOS BrowsersChess.com Leak Exposes 7.3 Million Users – Evidence Points to ScrapingUS Authorizes Private Cyber Firms to Hack Transnational Criminal NetworksAdobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public DisclosureU.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalogSharePoint CVE-2026-55040 Comes Under Attack Following Public ExploitStorm-1175 Replaces Medusa With New StormEncryptor RansomwareNorth Korean Lazarus Group Uses Windows Zero-Day in Operation Dream JobCEVA Logistics Cyberattack Disrupts European Warehouses and ShipmentsChina-Linked Hackers Use AI Agents in Autonomous Attack on TaiwanKimwolf v7 Hides DDoS Traffic Behind Chrome Fingerprints and EthereumShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet PatchMicrosoft Patch Tuesday for August 2026 Fixed a Zero-Day and Wormable RCEZoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code ExecutionExfilSquad Targets New Victims, Shares Data via TorrentsIran-Linked Hackers Target More US Water Infrastructure in New Jersey and AlabamaThe inconvenient truth about AI pentesting: someone has to check all the workCisco Warns of Seven ClamAV Flaws, Two With Public PoCsGym Booking Task Turns Into Real-World AI CyberattackU.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled DataWebmail CSS Attacks Expose a New Risk for AI-Powered Email Tools

International Press – Newsletter

Cybercrime

ExfilSquad Targets New Victims, Shares Data via Torrents

Israeli population registry for sale, but the data is old

Before Fraud Transacts

ExfilSquad Targets New Victims, Shares Data via Torrents

Fake CAPTCHA, Real Business: Traffic Distribution for Hire

7.3M chess.com records leaked, and the data is real

Drop Something? Don’t Worry, Someone Caught it

Malware

ShieldBreak – August 2026 disclosure

Kimwolf v7: An Evolution of the Kimwolf Botnet

AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers

Gone with the WindRelay: A New Malware Combo Behind a Growing Fraud Scheme

737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection

Hacking

Chinese Model Kimi K3 Breaks UK AI Safety Institute Benchmark Evaluations

AI assistant hacks gym website in first known Australian autonomous cyber attack

Zoomsday

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

Hackers exploit macOS Screen Sharing flaw to deploy Monero miner

It’s a pre-auth, stupid!

A root remote command execution on macOS with M5 in 2026?

Intelligence and Information Warfare

Follow-Up Analysis of the 29 December 2025 Energy Sector Incident

New Jersey, Alabama Join States Targeted in Water Cyberattacks

Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM

China-linked hackers hit Taiwan in unprecedented ‘autonomous’ AI cyber attack

State Sponsored Hackers Use Fake Job Offers to Deliver New Zero Day Exploit

Social engineering performed by UAC-0145: compromising in the employment process

Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side

PATCHCORD: New malware cluster targets Afghan telecom and South Asian critical infrastructure

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

How Tehran’s Use of Cyber Operations in the U.S.-Iran Conflict Has Evolved

Cybersecurity

How a small Israeli startup was linked to rogue AI hacks at OpenAI, Anthropic and Meta

Responding to the next frontier of critical cyber capabilities

Facebook is paying controversial creators to produce rage-bait content

Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC

The August 2026 Security Update Review

Cyberattack on logistics giant CEVA delivers customer data into the wrong hands

About Apple threat notifications and protecting against mercenary spyware

If Apple sends you a push notification alerting you to a spyware attack, take it seriously

AI isn’t changing how companies work. It’s changing what a company is

Swarms of OpenAI systems set up their own chatrooms to discuss and carry out hacks, company reveals

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)