Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION
July 19, 2026 
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
International Press – Newsletter
Armenian National Extradited to the United States Pleads Guilty to Ransomware Extortion Conspiracy
Investigation into Odido hack points to possible involvement of the Dutch
German firm files for insolvency, blames cybercrims who shut down production for 6 weeks
Japan’s largest taxi operator shuts systems after cyberattack
Inside Forg365: A Telegram-Distributed Sneaky 2FA-Style PhaaS Targeting Microsoft 365
Two sentenced for hacking Transport for London in UK’s biggest ever cyber crime case
Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
Malware
CrashStealer: C++ macOS infostealer posing as crash reporter
Lucide Proxy: Turning Student Web Proxies into DDoS Bots
AsyncAPI npm organization compromised, 2M weekly downloads affected
TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains
NadMesh Botnet Analysis: A Product-Grade Threat for the AI Service Era
Hacking
Large-scale exploitation campaign targeting website content management systems (CMS)
Analyzing AI-Augmented Network Enumeration
LegacyHive public disclosure
Claude for-Chrome Extension-Bypass
Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8n
wp2shell: Pre Authentication RCE in WordPress Core
OpenSSL HollowByte: A DoS Hiding in 11 Bytes
wp2shell: Pre Authentication RCE in WordPress Core
Intelligence and Information Warfare
EU targets Russian intelligence officers accused of running a yearslong cyberspying campaign
NSA revives ‘Tailored Access Operations’ name for elite hacking unit
UK and EU strike Russian cyber networks with new sanctions
Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting
NATO logistics, Ukrainian troops are top subjects of Russian camera hacks, advisory says
Suspected Chinese Operators Use Claude Code and DeepSeek to Target Government and Financial Systems Across Four Countries
Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New Backdoor
New North Korean campaign uses fake coding interviews to steal developer credentials
Cybersecurity
xAI Grok CLI Uploads Full Repos and Secrets, Opt-Out Ignored
Satya Nadella’s ‘Reverse Information Paradox’ post draws reactions from AI leaders
BabeLLM: A unified taxonomy for NLP-based LLM cybersecurity applications
Treasury Sanctions Malware and Infrastructure Providers Supporting Ransomware Attacks Against Americans
The July 2026 Security Update Review
A Puerto Rico Government Agency Exposed 1 Million Social Security Numbers
AI Data Centers Are Being Built Faster Than They Can Be Secured
Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
Ernst & Young discloses data breach after support system hack
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
Pierluigi Paganini
(SecurityAffairs – hacking, newsletter)
