Security Affairs newsletter Round 584 by Pierluigi Paganini – INTERNATIONAL EDITION
2026-07-05T14:51:40Z•58130e7410f21d0d29041a2e6d2b4c51761fd1a811dfd292a6da5bcd918b32ae
AI-driven-ransomwareCISACVE-2026-45659DKIMDMARCEU-antitrustJADEPUFFERKairosKnown-Exploited-VulnerabilityMTA-STSNSONetNutPegasusSPFSharePointTeamPCPVercelcloud-credentialsdata-extortiondev-tools-poisoningemail-securityextortionresidential-proxyshadow-AIsupply-chain-breach
What happened
Security Affairs Round 584 highlights multiple high-impact cyber incidents and trends: a U.S. government agency paid $1M to the data-extortion group Kairos; the FBI issued a FLASH on TeamPCP poisoning developer/security tools to steal cloud credentials and spread malware; Citizen Lab found Pegasus spyware used against an MEP investigating Pegasus; Sysdig documented JADEPUFFER, an end-to-end LLM-driven ransomware operation; a shadow AI supply-chain breach at Vercel led to data theft and a $2M extortion demand; Google/FBI disrupted the NetNut malicious residential proxy network; research shows政府
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 58130e7410f21d0d29041a2e6d2b4c51761fd1a811dfd292a6da5bcd918b32ae
- Enrichment time
- 2026-07-05T14:51:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.