> Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank BreachesOne Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your CustomersU.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalogWhite House Network Appears in Global Residential Proxy TrafficOpenAI Rates GPT-6 Cyber Critical After Major Vulnerability DiscoveriesENISA Warns of Cyberattacks Targeting Refrigeration Systems Across EuropeOpenAI Reports Covert Underperformance in GPT-6 AstraUNM Health Shuts Clinics and Diverts Patients During Security IncidentRussian APT29 Targets Mobile Users with Watering Hole AttacksU.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalogU.S. Charges Canadian Man in Alleged Hack of University SupercomputersTwo Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches ReleasedCyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across EuropeCVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote CodeU.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalogBinance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion AttackSynology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM VersionsInside XCPE, the botnet that turned 1.3M set-top boxes into proxy serversNIS2 Makes Board Members Personally Liable for Access Control DecisionsApple’s spyware notifications reach the Bundestag: what the BSI says to do nowVOLTA, the infostealer that asks an AI which victims are worth the effortNew wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and EstoniaHackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian CitizensChainalysis Investigates Security Incident Involving AI-Driven Attack TechniquesFBI Blames North Korea for $6 Billion Binance Crypto TheftSMS of Death: Android under attack, an invisible SMS can block calls and emergency services International Press – Newsletter Cybercrime How hackers broke into four of Canada’s top law firms, stole client files and caused chaos Polymarket Pauses Trading as Prediction Market Investigates Security Incident From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths 29 October Binance Security Incident: Initial Findings and Response Update      “Black October” for AI Developer Platforms   Canadian man extradited to the U.S. for his role in computer hacking scheme targeting universities   ARTEX Exposed: Mapping the Infrastructure Behind the South Korean Bank Breaches French bank Credit Mutuel Arkea says €100 million missing after cyberattack   Malware Shutting the Door on the XCPE Botnet   Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles   Hackers hijack cPGuard autoupdate to deploy backdoor, steal data   CWPdoor: The Invisible Backdoor Living Inside Control Web Panel   Hacking SMS of Death  Chainalysis Security Incident Information   Russia and Ukraine say emergency alert apps were hit by apparent cyber-attacks   European supermarkets hit by new fridge cyber attack   The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources Securing Muse: More Than $1 Million in Bug Bounties Paid Out   WorkOS October 30th, 2026 Data Security Incident   A thousand fewer paths to root ThisBash Escape: Claude Dispatch Flaw Enables Browser Extensions RCE on the OS  Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560)  Intelligence and Information Warfare   North Korea Responsible for $6 Billion+ Binance Attack   Russia funded Facebook and Twitter investments through Kushner investor Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia French blood banks hit alongside cyberattack on European supermarkets UK and Germany to jointly develop military AI in 2027  Apple threat notifications regarding Mercenary Spyware   DarkBlinders: Inside an Active Espionage Campaign Poisoned Source: APT29 watering holes target mobile devices with n-day exploits Russian Federal State Statistics Service says it was hit by massive cyberattack — hackers steal 23TB of data, including Ukraine war casualty figures The Google Whistleblower Taking on Big Tech Over Its Role in Gaza   Weekly Wire #17: Hybrid war hits home   Cybersecurity Israeli startups raised at least $872 million in October, led by cybersecurity and AI  Europe on alert after supermarket freezers hit by cyber-attacks in 10 countries   Joint statement on cyber incidents in refrigeration systems across the EU   GPT‑6 Cyber: Advancing the frontier of aligned cybersecurity agents Residential Proxies Detected on White House Network   European refrigerator controller redux: A new wave of refrigeration attacks Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features        Japan announces emergency cybersecurity package following a wave of attacks    ThisBash Escape: Claude Dispatch Flaw Enables Browser Extensions RCE on the OS   Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)