Security Affairs newsletter Round 571 by Pierluigi Paganini – INTERNATIONAL EDITION


A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Qilin ransomware group claims the hack of German political party Die Linke
U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog
European Commission breach exposed data of 30 EU entities, CERT-EU says
North Korea–linked hackers drain $285M from Drift in sophisticated attack
CrystalX RAT: new MaaS malware combines spyware, stealer, and remote access
Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies
Hasbro hit by cyberattack, investigates possible data breach
Cisco fixed critical and high-severity flaws
Threat actor UAC-0255 impersonate CERT-UA to spread AGEWHEEZE malware via phishing
Italian spyware vendor creates Fake WhatsApp app, targeting 200 users
U.S. CISA adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog
Google fixes fourth actively exploited Chrome zero-day of 2026
Google links Axios npm supply chain attack to North Korea-linked APT UNC1069
SentinelOne autonomous detection blocks trojaned LiteLLM triggered by Claude Code
Free VPNs leak your data while claiming privacy
Anthropic accidentally leaks Claude Code
Attackers hijack Axios npm account to spread RAT malware
Nearly half a Million mobile customers of Lloyds Banking Group affected by security incident
Dutch Ministry of Finance takes treasury systems offline amid cyber incident investigation
U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog
Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc
China-Linked groups target Southeast Asian government with advanced malware in 2025
It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies
Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution
New macOS Infinity Stealer uses Nuitka Python payload and ClickFix
Russia-linked APT TA446 uses DarkSword exploit to target iPhone users in phishing wave
Urgent Alert: NetScaler bug CVE-2026-3055 probed by attackers could leak sensitive data
Apple issues urgent lock screen warnings for unpatched iPhones and iPads

International Press – Newsletter

Cybercrime

Russian court sentences notorious card fraud ringleader ‘Flint’ and 25 associates

Cambodia extradites alleged cyber scam linchpin to China as crackdown intensifies 

Drift Protocol exploited for $286 million in suspected DPRK-linked attack  

Former Employee of National Industrial Company Pleads Guilty to Crimes Related to Hacking Computer Networks and Extorting Employees  

European Commission cloud breach: a supply-chain compromise  

Cyber ​​attack on the Left Party  

Malware

Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka  

axios Compromised: npm Supply Chain Attack via Dependency Injection  

Axios compromised: hijacked maintainer account pushes malicious npm versions 

A laughing RAT: CrystalX combines spyware, stealer, and prankware features  

Hacking

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

Supply Chain Attack on Axios Pulls Malicious Dependency from npm

How SentinelOne’s AI EDR Autonomously Discovered and Stopped Anthropic’s Claude from Executing a Zero Day Supply Chain Attack, Globally

Nicholas Carlini – Black-hat LLMs | [un]prompted 2026        

MAD Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)

New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets  

Double Agents: Exposing Security Blind Spots in GCP Vertex AI

ChatGPT Data Leakage via a Hidden Outbound Channel in the Code Execution Runtime      

Intelligence and Information Warfare

TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

Hacked Hospitals, Hidden Spyware: Iran Conflict Shows How Digital Fight Is Ingrained in Warfare

Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government  

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack  

BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection

UAC-0255 cyberattack disguised as a notification from CERT-UA using the AGEWHEEZE software tool (CERT-UA#21075) 

Iran-linked hackers claim breach of Israeli air defence contractor PSK Wind  

Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets  

Cybersecurity

Apple Now Sending Critical Security Alerts to iPhones Running iOS 17 and Earlier  

Forecasting Future Outbreaks A Behavioral and Predictive Approach to Proactive Cyber Risk Management  

Nearly half a million Lloyds Banking Group customers affected by personal data glitch  

Claude Code’s source code appears to have leaked: here’s what we know  

What’s Really Running Inside Your Free VPN: A Mysterium VPN Research  

Android developer verification: Rolling out to all developers on Play Console and Android Developer Console

After fighting malware for decades, this cybersecurity veteran is now hacking drones 

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)





Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Google Maps has a long list of hidden (and sometimes, just underrated) features that help you navigate seamlessly. But I was not a big fan of using Google Maps for walking: that is, until I started using the right set of features that helped me navigate better.

Add layers to your map

See more information on the screen

Layers are an incredibly useful yet underrated feature that can be utilized for all modes of transport. These help add more details to your map beyond the default view, so you can plan your journey better.

To use layers, open your Google Maps app (Android, iPhone). Tap the layer icon on the upper right side (under your profile picture and nearby attractions options). You can switch your map type from default to satellite or terrain, and overlay your map with details, such as traffic, transit, biking, street view (perfect for walking), and 3D (Android)/raised buildings (iPhone) (for buildings). To turn off map details, go back to Layers and tap again on the details you want to disable.

In particular, adding a street view and 3D/raised buildings layer can help you gauge the terrain and get more information about the landscape, so you can avoid tricky paths and discover shortcuts.

Set up Live View

Just hold up your phone

A feature that can help you set out on walks with good navigation is Google Maps’ Live View. This lets you use augmented reality (AR) technology to see real-time navigation: beyond the directions you see on your map, you are able to see directions in your live view through your camera, overlaying instructions with your real view. This feature is very useful for travel and new areas, since it gives you navigational insights for walking that go beyond a 2D map.

To use Live View, search for a location on Google Maps, then tap “Directions.” Once the route appears, tap “Walk,” then tap “Live View” in the navigation options. You will be prompted to point your camera at things like buildings, stores, and signs around you, so Google Maps can analyze your surroundings and give you accurate directions.

Download maps offline

Google Maps without an internet connection

Whether you’re on a hiking trip in a low-connectivity area or want offline maps for your favorite walking destinations, having specific map routes downloaded can be a great help. Google Maps lets you download maps to your device while you’re connected to Wi-Fi or mobile data, and use them when your device is offline.

For Android, open Google Maps and search for a specific place or location. In the placesheet, swipe right, then tap More > Download offline map > Download. For iPhone, search for a location on Google Maps, then, at the bottom of your screen, tap the name or address of the place. Tap More > Download offline map > Download.

After you download an area, use Google Maps as you normally would. If you go offline, your offline maps will guide you to your destination as long as the entire route is within the offline map.

Enable Detailed Voice Guidance

Get better instructions

Voice guidance is a basic yet powerful navigation tool that can come in handy during walks in unfamiliar locations and can be used to ensure your journey is on the right path. To ensure guidance audio is enabled, go to your Google Maps profile (upper right corner), then tap Settings > Navigation > Sound and Voice. Here, tap “Unmute” on “Guidance Audio.”

Apart from this, you can also use Google Assistant to help you along your journey, asking questions about your destination, nearby sights, detours, additional stops, etc. To use this feature on iPhone, map a walking route to a destination, then tap the mic icon in the upper-right corner. For Android, you can also say “Hey Google” after mapping your destination to activate the assistant.

Voice guidance is handy for both new and old places, like when you’re running errands and need to navigate hands-free.

Add multiple stops

Keep your trip going

If you walk regularly to run errands, Google Maps has a simple yet effective feature that can help you plan your route in a better way. With Maps’ multiple stop feature, you can add several stops between your current and final destination to minimize any wasted time and unnecessary detours.

To add multiple stops on Google Maps, search for a destination, then tap “Directions.” Select the walking option, then click the three dots on top (next to “Your Location”), and tap “Edit Stops.” You can now add a stop by searching for it and tapping “Add Stop,” and swap the stops at your convenience. Repeat this process by tapping “Add Stops” until your route is complete, then tap “Start” to begin your journey.

You can add up to ten stops in a single route on both mobile and desktop, and use the journey for multiple modes (walking, driving, and cycling) except public transport and flights. I find this Google Maps feature to be an essential tool for travel to walkable cities, especially when I’m planning a route I am unfamiliar with.


More to discover

A new feature to keep an eye out for, especially if you use Google Maps for walking and cycling, is Google’s Gemini boost, which will allow you to navigate hands-free and get real-time information about your journey. This feature has been rolling out for both Android and iOS users.



Source link