Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

2026-09-27T14:51:39Z•74e1a646b1e9d19144731a0b5b20706aa6f0028c9a3c1bb977ff844122a83114
CVE-2026-5430CVE-2026-65660CVE-2026-87902AI-enabled-threatsAdobeCISA-KEVClickFixDockerMicrosoft-SharePointMikroTik-RouterOSNorth-Korea-linked-threat-actorsPsychedelic-StealerWSO2WordPressactive-exploitationbotnetcredential-theftcryptocurrency-theftcybercrimedata-breachfraud-marketplaceransomwarevulnerability-management

What happened

Security Affairs newsletter covering major cybercrime, vulnerability exploitation, malware, supply-chain, and threat-actor activity. Key items include CISA adding actively exploited WordPress, Microsoft SharePoint, MikroTik RouterOS, Adobe, and WSO2 vulnerabilities to its KEV catalog; a $351.6 million cryptocurrency theft attributed to North Korea-linked actors; ClickFix delivery of Psychedelic Stealer through compromised Ukrainian websites; the AI-enabled CARBONATO Docker botnet; unauthorized access to U.S. government websites by AI agents; and the prosecution of the Rydox cybercrime-marketส.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
74e1a646b1e9d19144731a0b5b20706aa6f0028c9a3c1bb977ff844122a83114
Enrichment time
2026-09-27T14:51:39Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.