> Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsU.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog11-Year-Old critical telnetd flaw found in GNU InetUtils (CVE-2026-24061)Fortinet warns of active FortiCloud SSO bypass affecting updated devicesU.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalogInvestigation underway after 72M Under Armour records surface onlineMachine learning–powered Android Trojans bypass script-based Ad Click detectionCritical SmarterMail vulnerability under attack, no CVE yetArctic Wolf detects surge in automated Fortinet FortiGate firewall configuration attacksU.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalogCisco fixed actively exploited Unified Communications zero dayZoom fixed critical Node Multimedia Routers flawACME flaw in Cloudflare allowed attackers to reach origin serversCrooks impersonate LastPass in campaign to harvest master passwordsVoidLink shows how one developer used AI to build a powerful Linux malwarePDFSIDER Malware – Exploitation of DLL Side-Loading for AV and EDR EvasionAccess broker caught: Jordanian pleads guilty to hacking 50 companiesCritical TP-Link VIGI camera flaw allowed remote takeover of surveillance systemsTelegram-based illicit billionaire marketplace Tudou Guarantee stopped transactionsUK NCSC warns of Russia-linked hacktivists DDoS attacksRansomware attack on Ingram Micro impacts 42,000 individualsStealC malware control panel flaw leaks details on active attackerHacker pleads guilty to hacking Supreme Court, AmeriCorps, and VA SystemsHacktivists hijacked Iran ’s state TV to air anti-regime messages and an appeal to protest from Reza PahlaviGootLoader uses malformed ZIP files to bypass security controls International Press – Newsletter Cybercrime International operation of Ukraine and Germany: members of the Black Basta group were exposed  Tennessee Man Pleads in Hacking U.S. Supreme Court, AmeriCorps, and VA Health System      Tudou Guarantee winds down operations after $12 billion in transactions   Jordanian Man Admits Selling Unauthorized Access to Computer Networks of 50 Companies  Greek police arrest scammers using fake cell tower hidden in car trunk Resurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint  Under Armour says it’s ‘aware’ of data breach claims after 72M customer records were posted online  ShinyHunters claim to be behind SSO-account data theft attacks Malware PDFSIDER Malware – Exploitation of DLL Side-Loading for AV and EDR Evasion   VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun  PyPI Package Impersonates SymPy to Deliver Cryptomining Malware   Osiris: New Ransomware, Experienced Attackers?  Hacking WhisperPair  WATCH: Anti-regime activists hack Iran’s national broadcaster, transmit Pahlavi’s calls to protest   CrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash Lures Interception and Eavesdropping of Satellite Communications   Cloudflare whacks WAF bypass bug that opened side door for attackers Cloudflare Zero-day: Accessing Any Host Globally  Arctic Wolf Observes Malicious Configuration Changes On Fortinet FortiGate Devices via SSO Accounts  Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass)   Analysis of Single Sign-On Abuse on FortiOS   CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026 Intelligence and Information Warfare Pro-Russia hacktivist activity continues to target UK organisations  Taiwan China Cyberattacks on Energy Sector Increased Tenfold  Threat Actors Expand Abuse of Microsoft Visual Studio Code From Protest to Peril Cellebrite Used Against Jordanian Civil Society   APT Malware Detection Model Based on Heterogeneous Multimodal Semantic Fusion EU considers whether there’s Huawei of axing Chinese kit from networks within 3 years ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 Cybersecurity TP-Link Patches Vulnerability Exposing VIGI Cameras to Remote Hacking  EU plans cybersecurity overhaul to block foreign high-risk suppliers New Phishing Campaign Targeting LastPass Customers  Global Cybersecurity Outlook 2026  Specops Breached Password Report 2026   Are We Ready to Be Governed by Artificial Intelligence?  NSO Group spyware probe due to lack of cooperation from Israel Announcement from the new TikTok USDS Joint Venture LLC  Ransomware: Tactical Evolution Fuels Extortion Epidemic  Europe Prepares for a Nightmare Scenario: The U.S. Blocking Access to Tech   Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)