Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION
2026-09-27T14:51:39Z•74e1a646b1e9d19144731a0b5b20706aa6f0028c9a3c1bb977ff844122a83114
CVE-2026-5430CVE-2026-65660CVE-2026-87902AI-enabled-threatsAdobeCISA-KEVClickFixDockerMicrosoft-SharePointMikroTik-RouterOSNorth-Korea-linked-threat-actorsPsychedelic-StealerWSO2WordPressactive-exploitationbotnetcredential-theftcryptocurrency-theftcybercrimedata-breachfraud-marketplaceransomwarevulnerability-management
What happened
Security Affairs newsletter covering major cybercrime, vulnerability exploitation, malware, supply-chain, and threat-actor activity. Key items include CISA adding actively exploited WordPress, Microsoft SharePoint, MikroTik RouterOS, Adobe, and WSO2 vulnerabilities to its KEV catalog; a $351.6 million cryptocurrency theft attributed to North Korea-linked actors; ClickFix delivery of Psychedelic Stealer through compromised Ukrainian websites; the AI-enabled CARBONATO Docker botnet; unauthorized access to U.S. government websites by AI agents; and the prosecution of the Rydox cybercrime-marketส.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 74e1a646b1e9d19144731a0b5b20706aa6f0028c9a3c1bb977ff844122a83114
- Enrichment time
- 2026-09-27T14:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.