> Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 TokensAdobe fixed a maximum-severity vulnerability flaw in Campaign ClassicSouth Korea Warns of State-Backed Watering Hole AttacksGoogle AI Supercharges Chrome Security, Fixing 1,072 BugsWhat an LLM Can Find: A Practical, Cheap Path to Code-level Threat DiscoveryAnthropic Finds Claude Breached Real Companies During Security EvaluationsSilverFox Targets Japanese Manufacturer With Advanced ValleyRAT CampaignResearchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police AppWhy brand impersonation is becoming an initial access vectorCybercriminals Are Leveraging Autonomous AI Offensive Security AgentsAnalog Devices Discloses Data Breach After Unauthorized System AccessFCC Restricts New Foreign Robots and Inverters Over Security RisksU.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalogeSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis FindsClaude Mythos Shows AI Can Outpace Human Cryptography ResearchHackers Strike Minnesota Water Utilities, One Plant Briefly OfflineShinyHunters Claims Ernst & Young Data Breach, Threatens to Leak Stolen DataBroadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code ExecutionOpenAI AI Model Used JFrog Artifactory Zero-Day Before Hugging Face BreachOpenAI’s Rogue AI Agent Breached Second Company, Report SaysVPN Breach Exposes 58 Million Connection Logs Despite “No-Logs” ClaimsDysphoria Botnet Uses Blockchain Domains to Hide C2 InfrastructureJetBrains Patches Critical TeamCity Flaw Allowing Server TakeoverNew Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks WorldwideU.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalogReuters: OpenAI Agent Hacked Hugging Face for Days Before Being DetectedMedusaHVNC Trojan Creates Hidden Desktops to Hijack Browsers and Steal DataDentaQuest disclosed a data breach that impacted +23 million individualsGitLab Users Urged to Patch After Research Reveals Critical RCE ChainEFF: Most Smart Wearables Still Fall Short on Privacy and TransparencyLockBit5 and Qilin Lead Ransomware Attacks Against Italian OrganizationsHackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Credentials International Press – Newsletter Cybercrime DentaQuest Data Breach Potentially Impacts Over 23 Million People   Crime: Risk, Responsibility, and Accountability    ShinyHunters Claims Ernst & Young Hack   When AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents   US accuses American of allegedly wiping his phone using a ‘duress’ password during border search   Hacker wipes European country’s entire land registry database, paralyzing real-estate market  Malware TAG-195 Upgrades MaaS Ecosystem with Modular Tools  SourTrade: Browser-Assembled Malware Delivered Through Malvertising   MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions   Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service   Hacking Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident   Investigating three real-world incidents in our cybersecurity evaluations   Discovering cryptographic weaknesses with Claude DNS Poisoning Tactics Expand to Hospitality Wi-Fi   Going depthfirst: Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilities   The hacker who humiliated spyware makers and was never caught  Millions of California-bought cars can be hijacked via Bluetooth  Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker eBPF Warfare: Subverting Security Solutions Through Kernel-Space Manipulation   Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232) JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack What Can an Attacker Find With an LLM?       Intelligence and Information Warfare   Inside a DPRK BlueNoroff ClickFix Kit   MNIT activates statewide cybersecurity response to support affected communities and protect critical infrastructure    Behind the Lithuanian Label: What’s Inside Nicegram and eSIM Plus  Israel’s Palantir Rival Is Selling $1 Million Spy Vans To U.S. Cops   Trump administration bans new Chinese humanoid robots, to protect US AI buildout Cato CTRL Threat Research: SilverFox Evolves: Abuse of New Drivers and Trusted Software Hijacking Enable Remote Access with ValleyRAT in Japan   Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon ClickFix, EtherHiding & a DPRK Wallet Trail   [Joint Cyber ​​Security Advisory] Operation Double Barrel (The Relationship Between State-Backed Hacking Organizations and the Gunra Ransomware Group)   OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft   CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs Coordinated “cyberattack” on Minnesota water utilities: What you need to know       Cybersecurity OpenAI’s rogue agent compromised a customer at a second tech firm, executive says   Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features       Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week   A “No-Logs” VPN That Kept 58 Million Connection Logs: Inside the NotVPN / SplitVPN Breach   REPS LIEU AND MORAN INTRODUCE BILL TO REQUIRE KILL SWITCH FOR AI SYSTEMS THAT CAN CAUSE CATASTROPHIC HARM The AI Sovereignty Paradox      Stronger with every update: How we’re making Chrome and the web safer in the AI Era  Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)