![\"\"\/](\"https:\/\/securityaffairs.com\/wp-content\/themes\/security_affairs\/images\/user-icon.svg\"){kind=icon}
Pierluigi Paganini<\/a>\n\t\t\t\t\t\t\t
![\"\"\/](\"https:\/\/securityaffairs.com\/wp-content\/themes\/security_affairs\/images\/clock-icon.svg\"){kind=icon}
October 26, 2025<\/p>\n\t\t\t\t\t\t![\"\"\/](\"https:\/\/www.newsbeep.com\/us\/wp-content\/uploads\/2025\/10\/newsletter.png\")
<\/p>\n
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.<\/p>\n
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.<\/p>\n
International Press \u2013 Newsletter<\/p>\n
Cybercrime
Myanmar military shuts down a major cybercrime center and detains over 2,000 people<\/a>\u00a0\u00a0<\/p>\n Email Bombs Exploit Lax Authentication in Zendesk<\/a>\u00a0\u00a0<\/p>\n Cybercriminals Abuse AI Website Creation App For Phishing<\/a>\u00a0<\/p>\n Jingle Thief: Inside a Cloud-Based Gift Card Fraud Campaign<\/a><\/p>\n Cyber incidents in Texas, Tennessee and Indiana impacting critical government services<\/a>\u00a0<\/p>\n The Smishing Deluge: China-Based Campaign Flooding Global Text Messages<\/a>\u00a0<\/p>\n Malware<\/p>\n TikTok videos continue to push infostealers in ClickFix attacks<\/a><\/p>\n To Be (A Robot) or Not to Be: New Malware Attributed to Russia State-Sponsored COLDRIVER<\/a>\u00a0<\/p>\n Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys<\/a>\u00a0\u00a0<\/p>\n GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace<\/a>\u00a0<\/p>\n Dissecting YouTube\u2019s Malware Distribution Network October 23, 2025<\/a>\u00a0<\/p>\n Hacking<\/p>\n Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks<\/a>\u00a0<\/p>\n TARmageddon (CVE-2025-62518): RCE Vulnerability Highlights the Challenges of Open Source Abandonware<\/a>\u00a0\u00a0<\/p>\n SessionReaper attacks have started, 3 in 5 stores still vulnerable Sansec by Sansec Forensics Team<\/a><\/p>\n Why nested deserialization is STILL harmful \u2013 Magento RCE (CVE-2025-54236)<\/a>\u00a0 \u00a0<\/p>\n Pwn2Own Ireland 2025: Day Three and Master of Pwn<\/a>\u00a0\u00a0<\/p>\n Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287)<\/a>\u00a0<\/p>\n Realtime AI-Supported Voice Conversion (Deepfake) and its applications on Vishing and Social Engineering exercises<\/a>\u00a0\u00a0<\/p>\n Microsoft 365 Copilot \u2013 Arbitrary Data Exfiltration Via Mermaid Diagrams<\/a>\u00a0<\/p>\n Intelligence and Information Warfare<\/p>\n China Says It Found Evidence of US Cyber Attack on State Agency<\/a><\/p>\n \u2018Catastrophic\u2019 attack as Russians hack files on EIGHT MoD bases and post them on the dark web<\/a>\u00a0\u00a0<\/p>\n Salty Much: Darktrace\u2019s view on a recent Salt Typhoon intrusion<\/a>\u00a0\u00a0<\/p>\n Unmasking MuddyWater\u2019s New Malware Toolkit Driving International Espionage<\/a>\u00a0<\/p>\n PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation<\/a><\/p>\n Dark Covenant 3.0: Controlled Impunity and Russia\u2019s Cybercriminals<\/a><\/p>\n UK facing \u2018most contested and complex\u2019 threat in decades, warns GCHQ director<\/a>\u00a0<\/p>\n Gotta fly: Lazarus targets the UAV sector<\/a>\u00a0<\/p>\n ToolShell Used to Compromise Telecoms Company in Middle East<\/a><\/p>\n StealthServer: A Dual-Platform Backdoor from a South Asian APT Group<\/a><\/p>\n Cybersecurity<\/p>\n AI-enabled ransomware attacks: CISO\u2019s top security concern \u2014 with good reason<\/a>\u00a0<\/p>\n NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million<\/a>\u00a0\u00a0<\/p>\n Microsoft Digital Defense Report 2025<\/a>\u00a0\u00a0<\/p>\n Cyber Monitoring Centre Statement on the Jaguar Land Rover Cyber Incident \u2013 October 2025<\/a><\/p>\n Dark Covenant 3.0: Controlled Impunity and Russia\u2019s Cybercriminals<\/a>\u00a0 \u00a0\u00a0<\/p>\n Microsoft Digital Defense Report 2025<\/a>\u00a0\u00a0<\/p>\n Apple alerts exploit developer that his iPhone was targeted with government spyware<\/a>\u00a0\u00a0<\/p>\n Cyberattack on Russia\u2019s food safety agency reportedly disrupts product shipments<\/a>\u00a0\u00a0<\/p>\n Follow me on Twitter:\u00a0@securityaffairs<\/a>\u00a0and\u00a0Facebook<\/a>\u00a0and\u00a0Mastodon<\/a><\/p>\n