> Security Affairs newsletter Round 558 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A massive breach exposed data of 17.5M Instagram usersNorth Korea–linked APT Kimsuky behind quishing attacks, FBI warnsIllinois Department of Human Services (IDHS) suffered a data breach that impacted 700K individualsTrend Micro fixed a remote code execution in Apex CentralIran cuts Internet nationwide amid deadly protest crackdownChina-linked UAT-7290 spies on telco in South Asia and Europe using modular malwareChinese-speaking hackers exploited ESXi zero-days long before disclosureAstaroth banking Trojan spreads in Brazil via WhatsApp wormPublic PoC prompts Cisco patch for ISE, ISE-PIC vulnerabilityU.S. CISA adds HPE OneView and Microsoft Office PowerPoint flaws to its Known Exploited Vulnerabilities catalogChina-linked groups intensify attacks on Taiwan’s critical infrastructure, NSB warnsNi8mare flaw gives unauthenticated control of n8n instancesMisconfigured email routing enables internal-spoofed phishingVeeam resolves CVSS 9.0 RCE flaw and other security issuesHackers actively exploit critical RCE flaw in legacy D-Link DSL routersFake Booking.com lures and BSoD scams spread DCRat in European hospitality sectorCERT/CC warns of critical, unfixed vulnerability in TOTOLINK EX200Google fixes critical Dolby Decoder bug in Android January updateResecurity Went on the Cyber Offensive – When ‘Shiny Objects’ trick ‘Shiny Hunters’Russia-linked APT UAC-0184 uses Viber to spy on Ukrainian military in 2025Kimwolf botnet leverages residential proxies to hijack 2M+ Android devicesThe cybercriminal behind the 2016 Bitfinex hack has been released from prison early thanks to Trump’s 2018 First Step ActVVS Stealer, a new python malware steals Discord credentialsSedgwick discloses data breach after TridentLocker ransomware attackResecurity Caught ShinyHunters in HoneypotWhat is happening to the Internet in Venezuela? Did the U.S. use cyber capabilities?President Trump blocks $2.9M Emcore chip sale over security concerns International Press – Newsletter Cybercrime Synthetic Data: A New Frontier for Cyber Deception and Honeypots   Ilya Lichtenstein, Bitcoin hacker behind massive crypto theft, credits Trump for early prison release   Analyzing PHALT#BLYX: How Fake BSODs and Trusted Build Tools Are Used to Construct a Malware Infection   Founder of spyware maker pcTattletale pleads guilty to hacking and advertising surveillance software   CNCERT: Risk Warning Regarding the “Black Cat” Gang’s Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control Backdoors    Who Benefited from the Aisuru and Kimwolf Botnets?  17.5 Million Instagram Accounts Exposed in Massive Data Breach  Malware VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion   Malicious NPM Packages Deliver NodeCordRAT     Boto-Cor-de-Rosa campaign reveals Astaroth WhatsApp-based worm activity in Brazil The Mac Malware of 2025   Hacking AI in Cybersecurity: How Xfenser Enables Offensive and Defensive Intelligence in the Era of Autonomous Agents   HandPwning: security pitfalls of hand-geometry recognition-based access control systems   PlayStation 5 ROM keys leaked — jailbreaking could be made easier with BootROM codes   Hacktivist deletes white supremacist websites live onstage during hacker conference   TOTOLINK EX200 firmware-upload error handling can activate an unauthenticated root telnet service Hacker Conversations: Katie Paxton-Fear Talks Autism, Morality and Hacking Safetensors Forensics: It’s “Safe”… Right?   Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers The Great VM Escape: ESXi Exploitation in the Wild  Trend Micro Apex Central Multiple Vulnerabilities Phishing actors exploit complex routing and misconfigurations to spoof domains  Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release Intelligence and Information Warfare Trump suggests US used cyberattacks to turn off lights in Venezuela during strikes   Artificial Intelligence in the Military Domain and Its Implications for International Peace and Security: An Evidence-Based Road Map for Future Policy Action   UAC-0184 | “The Dark Side of the Fallen Files” Pitching Operation   Analysis on China’s Cyber Threats to Taiwan’s Critical Infrastructure in 2025   UAT-7290 targets high value telecommunications infrastructure in South Asia   Iran shuts down internet as regime struggles to contain escalating unrest   North Korean Kimsuky Actors Leverage Malicious QR Codes in Spearphishing Campaigns Targeting U.S. Entities   Cybersecurity California residents can use new tool to demand brokers delete their personal data  Ten found guilty of cyber-bullying Brigitte Macron   New cyber action plan to tackle threats and strengthen public services   OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls Tim Kosiba Named NSA Deputy Director AI-Driven Cybersecurity Threats: A Survey of Emerging Risks and Defensive Strategies Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)