> Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Crooks Are Buying Your Expired Domains and Using Them to Deliver MalwareSAP Commerce Cloud CVE-2026-58231 Exploited in the WildmacOS Screen Sharing Flaw Exploited to Deploy Monero MinersGeoServer Zero-Day Is Already Being Probed. That’s the ProblemApple warned hundreds of users of mercenary spyware attacksAmnesiaStealer Gives Attackers Live Control of Victims’ macOS BrowsersChess.com Leak Exposes 7.3 Million Users – Evidence Points to ScrapingUS Authorizes Private Cyber Firms to Hack Transnational Criminal NetworksAdobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public DisclosureU.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalogSharePoint CVE-2026-55040 Comes Under Attack Following Public ExploitStorm-1175 Replaces Medusa With New StormEncryptor RansomwareNorth Korean Lazarus Group Uses Windows Zero-Day in Operation Dream JobCEVA Logistics Cyberattack Disrupts European Warehouses and ShipmentsChina-Linked Hackers Use AI Agents in Autonomous Attack on TaiwanKimwolf v7 Hides DDoS Traffic Behind Chrome Fingerprints and EthereumShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet PatchMicrosoft Patch Tuesday for August 2026 Fixed a Zero-Day and Wormable RCEZoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code ExecutionExfilSquad Targets New Victims, Shares Data via TorrentsIran-Linked Hackers Target More US Water Infrastructure in New Jersey and AlabamaThe inconvenient truth about AI pentesting: someone has to check all the workCisco Warns of Seven ClamAV Flaws, Two With Public PoCsGym Booking Task Turns Into Real-World AI CyberattackU.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled DataWebmail CSS Attacks Expose a New Risk for AI-Powered Email Tools International Press – Newsletter Cybercrime ExfilSquad Targets New Victims, Shares Data via Torrents   Israeli population registry for sale, but the data is old   Before Fraud Transacts   ExfilSquad Targets New Victims, Shares Data via Torrents Fake CAPTCHA, Real Business: Traffic Distribution for Hire   7.3M chess.com records leaked, and the data is real Drop Something? Don’t Worry, Someone Caught it       Malware ShieldBreak – August 2026 disclosure   Kimwolf v7: An Evolution of the Kimwolf Botnet  AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers   Gone with the WindRelay: A New Malware Combo Behind a Growing Fraud Scheme   737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection   Hacking Chinese Model Kimi K3 Breaks UK AI Safety Institute Benchmark Evaluations   AI assistant hacks gym website in first known Australian autonomous cyber attack   Zoomsday Attackers Exploit SharePoint Authentication Bypass After Public PoC Release Hackers exploit macOS Screen Sharing flaw to deploy Monero miner It’s a pre-auth, stupid!   A root remote command execution on macOS with M5 in 2026? Intelligence and Information Warfare   Follow-Up Analysis of the 29 December 2025 Energy Sector Incident     New Jersey, Alabama Join States Targeted in Water Cyberattacks  Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM   China-linked hackers hit Taiwan in unprecedented ‘autonomous’ AI cyber attack   State Sponsored Hackers Use Fake Job Offers to Deliver New Zero Day Exploit   Social engineering performed by UAC-0145: compromising in the employment process  Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side   PATCHCORD: New malware cluster targets Afghan telecom and South Asian critical infrastructure  APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring How Tehran’s Use of Cyber Operations in the U.S.-Iran Conflict Has Evolved   Cybersecurity How a small Israeli startup was linked to rogue AI hacks at OpenAI, Anthropic and Meta Responding to the next frontier of critical cyber capabilities       Facebook is paying controversial creators to produce rage-bait content   Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC   The August 2026 Security Update Review  Cyberattack on logistics giant CEVA delivers customer data into the wrong hands About Apple threat notifications and protecting against mercenary spyware If Apple sends you a push notification alerting you to a spyware attack, take it seriously  AI isn’t changing how companies work. It’s changing what a company is  Swarms of OpenAI systems set up their own chatrooms to discuss and carry out hacks, company reveals  Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)