> Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open InternetAttackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomwareUK Council Attack Linked to Mass Exploitation of SonicWall FlawU.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalogMore Capable AI, Not Enough GuardrailsA New Claude ‘s Sandbox Failure Shows How AI Can Rationalize Real-World HarmU.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalogFour Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 DaysUS Agencies Warn Chinese AI Firms Are Extracting Advanced AI ModelsGoogle fixes the seventh actively exploited Chrome zero-day of 2026PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server MemoryChaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-DayMicrosoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable BugsHackers Drain $320 Million From Liquid Network, Then Return Most of ItWeChat Worm Can Hijack Accounts Without Victims Answering CallsMassive Vietnam-Linked APIS Database Exposes Passport and Flight DataNorth Korea-linked Hackers Hide a Backdoor Inside HAProxyIT Help Desk Impersonation Lets Hackers Bypass MFACondé Nast Data of 32.8 Million Users Offered for Sale After WIRED LeakStyleSmuggler: The Magento Zero-Day Behind New Store AttacksChaotic Eclipse Released GreenSection, A PoC For NVIDIA Memory Corruption Zero-DayJSCeal Hides Crypto Malware in V8 BytecodeWhy AI Agent Sandboxes Are Failing Security TestsBerlin Ransomware Leak Exposes State SecretsYour MikroTik Router May Already Be Compromised: Look for SSH User “-2”AI Agents Hijacked German Wiki to Cheat, OpenAI Delayed Disclosure International Press – Newsletter Cybercrime Berlin launches crisis response after hackers publish stolen data 2026-09-03: Cloud Data Theft and Extortion via IT Help Desk Vishing and Residential Proxies   Berlin cyberattack: hackers leak highly sensitive data across dark web  Condé Nast: 32.8M user records for sale, sample verified   BengalSEO Part 1: Anatomy of the Operation   Hackers Drain $320 Million From Bitcoin’s Liquid Network, Keep $47 Million for Themselves in ‘White Hat’ Operation   Passkey-themed social engineering leads to identity and cloud compromise   Revolut confirms customer data breach through fake government requests   Ukrainian National Sentenced to Four Years in Prison for Wire Fraud Conspiracy in Connection with Conti Ransomware   Malware REVSTEALER ramps up Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode   Signing in without actually signing in   Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 Hacking Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended  GreenSection PoC exploit StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attack   WeWorm      ShieldCrash  Windows Defender 0day Vulnerability  CVE-2026-10520: Ivanti Sentry OS Command Injection Analysis   Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox UK Council Attack Linked to SonicWall SMA 1000 Campaign  Active exploitation of Cisco Secure Firewall Management Center vulnerabilities DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing Intelligence and Information Warfare   DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors Beyond Lazarus: Organization of DPRK cyber capabilities  760,000 Leaked Logins and Five Spy Campaigns: Inside Pakistan’s Worst Cyber Year Yet China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies   Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days  Cybersecurity OpenAI acknowledges ‘wiki incident’ and need for more transparency around unintended AI behavior     MikroTik ssh 0day exploitation in the wild   Daybreak for Frontline Defenders: $1B to protect essential services   OpenAI is building ‘automated shutdown’ capabilities for AI tools, letter to lawmakers says  A horde of AI agents conspired against their creators The September 2026 Security Update Review   AI could kill all humans in next decade, warn experts: but how seriously should we take them? An alignment assessment of recent cybersecurity incidents      Detecting and countering misuse of AI: September 2026     Best Practices Guide for Cyber Hygiene  Health data breach: EUR 500,000 fine against HÔPITAL PRIVÉ DE LA LOIRE   Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)