A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.North Korean IT Workers Used Stolen US Identities to Earn $3 MillionU.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalogBAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a WeekAI Agents Accessed Indian Organizations Without Authorization, CERT-In WarnsBurger King Japan Data Breach Impacted 11 Million CustomersF5 addressed critical RCE flaws in NGINXU.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalogPEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManagerCenterPoint Energy Data Breach: More Than 1 Million Texans AffectedU.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalogSilent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and GovernmentAdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware NetworksCisco Urges Customers to Patch Email Gateway Flaw and Check for CompromiseHirudo Android Trojan Replaces Banking Apps to Steal CredentialsU.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalogMicrosoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 UpdatesHidden Audio Recorder Found at OpenAI as Employee Faces Federal ChargesVolexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day VulnerabilitiesHow a leaked builder of XWorm turned a remote access trojan into a surveillance kitU.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalogAnthropic Shows How Small AI Models Could Replicate Across IoT DevicesGitLab Patches Max-Severity Vulnerability CVE-2026-97229Hackers cranked French supermarkets’ freezers up to 50 degrees, causing hundreds of stores to lose their stockShinyHunters arrest number three: a Canadian ransomware negotiatorCanonical Hit by Second DDoS Attack in 2026, Public Websites DisruptedSonicWall Patches CVSS 10.0 SSRF Flaw as Attacks BeginCyberXero Used 51 AI Agents to Steal 628,000 Ukrainian RecordsGTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full GameBitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countriesU.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalogInternational Press – NewsletterCybercrimeLeaked chats show Russian extortion gang sending ‘agents’ into US law firms GTA 6 leaker CyberLeek is now reportedly threatening to release a full, playable build of the game CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical InfrastructureShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group PerspectivesCanonical Websites Disrupted in Second DDoS Attack This Year Canadian ransomware negotiator arrested amid FBI hacker crackdown Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI Ransomware gets personal: ‘We-know-where-you-are kind of stuff’ MalwareIronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime XWorm Reborn: From infostealer to surveillance platform Hirudo: From Fake Updates to Patched Banking Apps The campaign that never stopped: tracking GhostAction from 2025 to 2026 Malfex imgdecode npm native addon loaderHackingHackers heat French supermarket fridges, sparking fires and spoiling foodFreeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After PatchSuper Intelligence Reached OT Systems and Moved EquipmentAI models may be capable of self-replicating without access to a datacenterA Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days Vghost: Beyond the Privilege Boundary Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identifiedUsing a funded test cryptocurrency wallet without authorization Intelligence and Information Warfare Disrupting AI-enabled “false front” operations Britain steps up national defences against growing AI risksRussia’s Yandex bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple of ‘Russia’s Google’ data centers — Ukraine intensifies bombing of Yandex data centers in response to Moscow’s strikes on Kyiv data centersUK keeps AI safeguards in the maybe pile for Cyber Security BIllUAE faces over 800,000 cyberattacks daily: How the country is fighting back Exposing AdFection How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware BREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTURE Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’ ARMORY CASTLE and BT26-05: What Security Teams Need to Know Justice Department Announces Coordinated Actions to Combat North Korean Remote IT Worker Schemes Affecting More than 70 U.S. Companies U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance Cybersecurity‘123456’ password linked to Denmark data breach affecting 8.8M peopleAI Governance Is Being Decided Now, and the Public Isn’t in the RoomThe October 2026 Security Update Review Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identifiedCisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway VulnerabilityMillions of phones exposed to Israeli spyware operation through online ads, researchers say More than 1 million Texans affected by CenterPoint data breach, AG report shows US federal bankruptcy court operations disrupted by cybersecurity incident Follow me on Twitter: @securityaffairs and Facebook and MastodonPierluigi Paganini(SecurityAffairs – hacking, newsletter)