Security Affairs newsletter Round 573 by Pierluigi Paganini – INTERNATIONAL EDITION


Security Affairs newsletter Round 573 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini
April 19, 2026

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Hidden VMs: how hackers leverage QEMU to stealthily steal data and spread malware
Nexcorium Mirai variant exploits TBK DVR flaw to launch DDoS attacks
Microsoft Defender under attack as three zero-days, two of them still unpatched, enable elevated access
Kyrgyzstan-based crypto exchange Grinex shuts down after $13.7M cyber heist, blames Western Intelligence
DraftKings hacker sentenced to prison, ordered to pay $1.4 Million
Operation PowerOFF: 53 DDoS domains seized and 3 Million criminal accounts uncovered
U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog
Cisco fixed four critical flaws in Identity Services and Webex
Cookeville Regional Medical Center hospital data breach impacts 337,917 people
AI platform n8n abused for stealthy phishing and malware delivery
From clinics to government: UAC-0247 expands cyber campaign across Ukraine
Sweden reports cyberattack attempt on heating plant amid rising energy threats
CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access
U.S. CISA adds Microsoft SharePoint Server, and Microsoft Office Excel flaws to its Known Exploited Vulnerabilities catalog
Mirax malware campaign hits 220K accounts, enables full remote control
PHP Composer flaws enable remote command execution via Perforce VCS
Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day
Personal data of 1 million gym members compromised in Basic-Fit security incident
US, UK and Canada disrupt $45M crypto theft in Operation Atlantic
ShinyHunters claim the hack of Rockstar Games breach and started leaking data
Attackers target unpatched ShowDoc servers via CVE-2025-0520
U.S. CISA adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog
Fake Claude AI installer abuses DLL sideloading to deploy PlugX
Hackers access Booking.com user data, company secures systems
iPhone forensics expose Signal messages after app removal in U.S. case
Citizen Lab: Webloc tracked 500M devices for global law enforcement
Iran-linked group Handala claims to have breached three major UAE organizations
CPUID watering hole attack spreads STX RAT malware
Adobe fixes actively exploited Acrobat Reader flaw CVE-2026-34621
Hackers claim control over Venice San Marco anti-flood pumps

International Press – Newsletter

Cybercrime

GTA-maker Rockstar Games hacked again but downplays impact  

TRM Labs Supports Operation Atlantic: USD 12 Million Frozen and 20,000 Victims Identified in International Crackdown on Crypto Scammers 

Crypto-exchange Kraken extorted by hackers after insider breach

Telegram Is Still Hosting a Sanctioned $21 Billion Crypto Scammer Black Market  

Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote Worker Scheme that Generated $5 Million in Revenue for the Democratic People’s Republic of Korea’s WMD Programs  

Europol-supported global operation targets over 75 000 users engaged in DDoS attacks  

Defendant Sentenced To Prison For Hacking Betting Website  

Sanctioned Russia-linked crypto exchange Grinex halts operations following alleged hack by “Western Special Services”

Ransomware attack continues to disrupt healthcare in London nearly two years later   

Inside an Underground Guide: How Threat Actors Vet Stolen Credit Card Shops     

Cyberscammers are bypassing banks’ security with illicit tools sold on Telegram  

Malware

Fake Claude site installs malware that gives attackers access to your computer  

JanelaRAT: a financial threat targeting users in Latin America  

Mirax extraction pipeline for StreamTV-like droppers    

PowMix botnet targets Czech workforce  

QEMU abused to evade detection and enable ransomware delivery

Hacking

New Booking.com data breach forces reservation PIN resets

ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers

Unrestricted Cloud Metadata Exfiltration via Header Injection Chain  

Composer 2.9.6: Perforce Driver Command Injection Vulnerabilities (CVE-2026-40261, CVE-2026-40176)  

MCPwn: A CVSS 9.8 One-Line MCP Bug That Hands Over Your Nginx to Anyone on the Network – Actively Exploited in the Wild

Hackers are abusing unpatched Windows security flaws to hack into organizations  

CVE-2026-39987 update: How attackers weaponized marimo to deploy a blockchain botnet via HuggingFace  

The n8n n8mare: How threat actors are misusing AI workflow automation  

A Deep Dive Into Attempted Exploitation of CVE-2023-33538

Intelligence and Information Warfare

A conflict of attrition: Iran’s bet on asymmetric warfare 

Uncovering Webloc An Analysis of Penlink’s Ad-based Geolocation Surveillance Tech  

Sweden blames pro-Russian group for cyberattack last year on its energy infrastructure  

Hospitals, local governments, and FPV operators are in the focus of the UAC-0247 cyber threat cluster  

Inside ZionSiphon: Darktrace’s Analysis of OT Malware Targeting Israeli Water Systems

Cybersecurity

When deleting Signal is not enough: the FBI, iPhone notifications, and what forensics can reveal  

Operation Atlantic: Protecting Victims Against Crypto Fraud  

Understanding the dark web

European regulators sidelined on Anthropic superhacking model  

Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members

The April 2026 Security Update Review  

AI Is Finding Bugs That Hackers Can Exploit. Get Ready for Bugmageddon  
Bringing Rust to the Pixel Baseband

NIST Updates NVD Operations to Address Record CVE Growth  

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)







Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


As I’m writing this, NVIDIA is the largest company in the world, with a market cap exceeding $4 trillion. Team Green is now the leader among the Magnificent Seven of the tech world, having surpassed them all in just a few short years.

The company has managed to reach these incredible heights with smart planning and by making the right moves for decades, the latest being the decision to sell shovels during the AI gold rush. Considering the current hardware landscape, there’s simply no reason for NVIDIA to rush a new gaming GPU generation for at least a few years. Here’s why.

Scarcity has become the new normal

Not even Nvidia is powerful enough to overcome market constraints

Global memory shortages have been a reality since late 2025, and they aren’t just affecting RAM and storage manufacturers. Rather, this impacts every company making any product that contains memory or storage—including graphics cards.

Since NVIDIA sells GPU and memory bundles to its partners, which they then solder onto PCBs and add cooling to create full-blown graphics cards, this means that NVIDIA doesn’t just have to battle other tech giants to secure a chunk of TSMC’s limited production capacity to produce its GPU chips. It also has to procure massive amounts of GPU memory, which has never been harder or more expensive to obtain.

While a company as large as NVIDIA certainly has long-term contracts that guarantee stable memory prices, those contracts aren’t going to last forever. The company has likely had to sign new ones, considering the GPU price surge that began at the beginning of 2026, with gaming graphics cards still being overpriced.

With GPU memory costing more than ever, NVIDIA has little reason to rush a new gaming GPU generation, because its gaming earnings are just a drop in the bucket compared to its total earnings.

NVIDIA is an AI company now

Gaming GPUs are taking a back seat

A graph showing NVIDIA revenue breakdown in the last few years. Credit: appeconomyinsights.com

NVIDIA’s gaming division had been its golden goose for decades, but come 2022, the company’s data center and AI division’s revenue started to balloon dramatically. By the beginning of fiscal year 2023, data center and AI revenue had surpassed that of the gaming division.

In fiscal year 2026 (which began on July 1, 2025, and ends on June 30, 2026), NVIDIA’s gaming revenue has contributed less than 8% of the company’s total earnings so far. On the other hand, the data center division has made almost 90% of NVIDIA’s total revenue in fiscal year 2026. What I’m trying to say is that NVIDIA is no longer a gaming company—it’s all about AI now.

Considering that we’re in the middle of the biggest memory shortage in history, and that its AI GPUs rake in almost ten times the revenue of gaming GPUs, there’s little reason for NVIDIA to funnel exorbitantly priced memory toward gaming GPUs. It’s much more profitable to put every memory chip they can get their hands on into AI GPU racks and continue receiving mountains of cash by selling them to AI behemoths.

The RTX 50 Super GPUs might never get released

A sign of times to come

NVIDIA’s RTX 50 Super series was supposed to increase memory capacity of its most popular gaming GPUs. The 16GB RTX 5080 was to be superseded by a 24GB RTX 5080 Super; the same fate would await the 16GB RTX 5070 Ti, while the 18GB RTX 5070 Super was to replace its 12GB non-Super sibling. But according to recent reports, NVIDIA has put it on ice.

The RTX 50 Super launch had been slated for this year’s CES in January, but after missing the show, it now looks like NVIDIA has delayed the lineup indefinitely. According to a recent report, NVIDIA doesn’t plan to launch a single new gaming GPU in 2026. Worse still, the RTX 60 series, which had been expected to debut sometime in 2027, has also been delayed.

A report by The Information (via Tom’s Hardware) states that NVIDIA had finalized the design and specs of its RTX 50 Super refresh, but the RAM-pocalypse threw a wrench into the works, forcing the company to “deprioritize RTX 50 Super production.” In other words, it’s exactly what I said a few paragraphs ago: selling enterprise GPU racks to AI companies is far more lucrative than selling comparatively cheaper GPUs to gamers, especially now that memory prices have been skyrocketing.

Before putting the RTX 50 series on ice, NVIDIA had already slashed its gaming GPU supply by about a fifth and started prioritizing models with less VRAM, like the 8GB versions of the RTX 5060 and RTX 5060 Ti, so this news isn’t that surprising.

So when can we expect RTX 60 GPUs?

Late 2028-ish?

A GPU with a pile of money around it. Credit: Lucas Gouveia / How-To Geek

The good news is that the RTX 60 series is definitely in the pipeline, and we will see it sooner or later. The bad news is that its release date is up in the air, and it’s best not to even think about pricing. The word on the street around CES 2026 was that NVIDIA would release the RTX 60 series in mid-2027, give or take a few months. But as of this writing, it’s increasingly likely we won’t see RTX 60 GPUs until 2028.

If you’ve been following the discussion around memory shortages, this won’t be surprising. In late 2025, the prognosis was that we wouldn’t see the end of the RAM-pocalypse until 2027, maybe 2028. But a recent statement by SK Hynix chairman (the company is one of the world’s three largest memory manufacturers) warns that the global memory shortage may last well into 2030.

If that turns out to be true, and if the global AI data center boom doesn’t slow down in the next few years, I wouldn’t be surprised if NVIDIA delays the RTX 60 GPUs as long as possible. There’s a good chance we won’t see them until the second half of 2028, and I wouldn’t be surprised if they miss that window as well if memory supply doesn’t recover by then. Data center GPUs are simply too profitable for NVIDIA to reserve a meaningful portion of memory for gaming graphics cards as long as shortages persist.


At least current-gen gaming GPUs are still a great option for any PC gamer

If there is a silver lining here, it is that current-gen gaming GPUs (NVIDIA RTX 50 and AMD Radeon RX 90) are still more than powerful enough for any current AAA title. Considering that Sony is reportedly delaying the PlayStation 6 and that global PC shipments are projected to see a sharp, double-digit decline in 2026, game developers have little incentive to push requirements beyond what current hardware can handle.

DLSS 5, on the other hand, may be the future of gaming, but no one likes it, and it will take a few years (and likely the arrival of the RTX 60 lineup) for it to mature and become usable on anything that’s not a heckin’ RTX 5090.

If you’re open to buying used GPUs, even last-gen gaming graphics cards offer tons of performance and are able to rein in any AAA game you throw at them. While we likely won’t get a new gaming GPU from NVIDIA for at least a few years, at least the ones we’ve got are great today and will continue to chew through any game for the foreseeable future.



Source link