> Security Affairs newsletter Round 592 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Hack One Robot, Reach the Next: Unitree G1 Security FlawsRhysida Ransomware Group Targets Berlin Government Ahead of VotePhilippine Nuclear and Naval Targets Hit by Suspected Chinese OperatorLove Electric Breach: 877,000 Driver Records Offered for $600Trump Targets Foreign Technology in New U.S. Power Grid Security OrderU.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalogRussian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic OrganizationsPaperCut Zero-Day Under Active Attack: Emergency Patch ReleasedU.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalogCyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three AirportsDark Caracal Deploys New Go Malware With Ethereum-Based C2 FallbackAustralian Police Charge Two Over TeamPCP Credential TheftMeta to Pay Up to $18B Over Teen Social Media UseCISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers DoOpenAI banned Russian ChatGPT accounts backing covert influence operationCISA Red Team Fully Compromised Two Critical Infrastructure OrgsFBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical InfrastructureU.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog88 ID Verification Breaches Show the Cost of Collecting Identity DataWhatsApp Adds Stronger Security as Passkeys Hit 1 BillionOperation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global ScamsNorway ’s Digital Government Infrastructure Hit by a new DDoS AttackWhen the Algorithm Fires You: Uber Faces €825M FineTwo CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as VulnerableU.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalogFake Minecraft Sites Are Still Spreading WeedHack After C2 TakedownCybercriminals Turn GTA VI Leaks Into Malware BaitSlovakia Warns of Cyber Risks in Road Speed CamerasTikTok Settles U.S. Child Privacy Case for $400 MillioniAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password ResetUK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water AttacksZero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection International Press – Newsletter Cybercrime iAuthFlow v2 Enrolls Google Passkeys That Survive Password Resets      Fake GTA VI ISO circulates on the internet a few days after leak, internet sleuths claim 113GB download is padded malware         Taiwan charges 9 over illegal AI server exports to China, including Nvidia and Super Micro staff   Indian man who fled US arrested on charges he helped scammers siphon $7.5 million from the elderly 58 arrests in global effort to dismantle West African organized crime groups Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain        RTM Locker interview: a ransomware actor on the RaaS market  Two WA men charged following AFP-FBI-WAPF disruption of alleged global cybercrime syndicate   Love Electric driver data for sale: NI, licence numbers  Ransomware group says it stole Berlin data, offers it for auction   Malware  FTP Banners: The New Dead Drop Resolver Delivering Novel RATs The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution      19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads   SLEEPWALKER: A Passive Backdoor With Its Own Command Language   Hacking One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin   A Tale of Two SOCs: Insights From Two Red Team Assessments   Three UK airports hit by cyber-attack with data of 8.7m customers accessed    New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access PaperCut Releases Emergency Patch for Exploited Zero-Day Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities    The Hugging Face incident and the road ahead Power Leak: Amazon Kiro IDE Prompt Injection Enables Data Exfiltration       Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range   PaperCut Actively Exploited: A Pre-Auth RCE Chain   Intelligence and Information Warfare   Iranian hackers shut down UK power plant   Operation QUICSILVER: China-Nexus Actor Targets Myanmar Diplomats via VHD-Delivered Go Backdoor     Digdir stabilizes solutions after cyberattack   Justice Department and FBI Seize Platforms Operated and Used by China State-Sponsored Hackers to Target U.S. Critical Infrastructure The infrastructure quartermaster: inside a China-nexus state enablement model      Disrupting a new covert influence campaign from Russia  Tortoiseshell: New Toolset and Operational Infrastructure Exposed Treasury Launches Unprecedented Campaign Against Iranian Regime on Economic D-Day Dark Caracal Reloaded: New Malware, Same Hunting Grounds   Cambodia-focused cluster uses multistage infection chain with localized lures BlueDelta Targets Defense and Diplomacy with HOOKEDGE Cybersecurity Warning about the risks of road meters   One billion people are now protected with passkeys on WhatsApp, plus more account security features An ID Check Breach Timeline: 2011–2026  Internet Exposure Reduction Guidance  Meta agrees to pay $18 billion to settle US lawsuits over children’s social media addiction   DECLARING A NATIONAL EMERGENCY TO SECURE THE UNITED STATES BULK-POWER SYSTEM   Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)