Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION
August 02, 2026 
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.
Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
International Press – Newsletter
DentaQuest Data Breach Potentially Impacts Over 23 Million People
Crime: Risk, Responsibility, and Accountability
ShinyHunters Claims Ernst & Young Hack
When AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents
US accuses American of allegedly wiping his phone using a ‘duress’ password during border search
Hacker wipes European country’s entire land registry database, paralyzing real-estate market
Malware
TAG-195 Upgrades MaaS Ecosystem with Modular Tools
SourTrade: Browser-Assembled Malware Delivered Through Malvertising
MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions
Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service
Hacking
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
Investigating three real-world incidents in our cybersecurity evaluations
Discovering cryptographic weaknesses with Claude
DNS Poisoning Tactics Expand to Hospitality Wi-Fi
Going depthfirst: Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilities
The hacker who humiliated spyware makers and was never caught
Millions of California-bought cars can be hijacked via Bluetooth
Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker
eBPF Warfare: Subverting Security Solutions Through Kernel-Space Manipulation
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack
What Can an Attacker Find With an LLM?
Intelligence and Information Warfare
Inside a DPRK BlueNoroff ClickFix Kit
MNIT activates statewide cybersecurity response to support affected communities and protect critical infrastructure
Behind the Lithuanian Label: What’s Inside Nicegram and eSIM Plus
Israel’s Palantir Rival Is Selling $1 Million Spy Vans To U.S. Cops
Trump administration bans new Chinese humanoid robots, to protect US AI buildout
Cato CTRL Threat Research: SilverFox Evolves: Abuse of New Drivers and Trusted Software Hijacking Enable Remote Access with ValleyRAT in Japan
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
ClickFix, EtherHiding & a DPRK Wallet Trail
[Joint Cyber Security Advisory] Operation Double Barrel (The Relationship Between State-Backed Hacking Organizations and the Gunra Ransomware Group)
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs
Coordinated “cyberattack” on Minnesota water utilities: What you need to know
Cybersecurity
OpenAI’s rogue agent compromised a customer at a second tech firm, executive says
Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features
Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week
A “No-Logs” VPN That Kept 58 Million Connection Logs: Inside the NotVPN / SplitVPN Breach
REPS LIEU AND MORAN INTRODUCE BILL TO REQUIRE KILL SWITCH FOR AI SYSTEMS THAT CAN CAUSE CATASTROPHIC HARM
The AI Sovereignty Paradox
Stronger with every update: How we’re making Chrome and the web safer in the AI Era
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
Pierluigi Paganini
(SecurityAffairs – hacking, newsletter)
