"CyberXero used 51 agents to steal 628,000 Ukrainian records."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 12 October 2026, 1320 UTC.

Content and Source:  "Security Affairs" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security Affairs

81K followers31 articles per week

#security#tech

10

Yesterday

CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records

IoC > 1 IP

•

by Pierluigi Paganini / 3h

•

12 TTPs

CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is an operation that combines traditional hacking tools with AI agents to carry out cyberattacks. According to SOCRadar researchers, the attackers use the same infrastructure for two different campaigns: one targets WordPress websites and e-commer

GTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full Game

Cyberleek threatens more GTA VI leaks

•

by Pierluigi Paganini / 6h

CyberLeek threatens to leak a playable GTA 6 build if its Solana meme coin hits a $30 million market cap, but the build remains unverified. CyberLeek, the anonymous figure behind this summer’s wave of GTA 6 leaks , just raised the stakes considerably. After dropping 25 minutes of gameplay footage earlier last week, including nudity and dev menu access, they’re now threatening to release a complet

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 3

by Pierluigi Paganini / 17h

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive opera

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 118

by Pierluigi Paganini / 21h

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure UAC-0277: ClickFix on compromised websites to spread LUNEXSTEALER MALFEX – A malicious npm postinstall no advisory has caught for fourteen months Canto incognito: tracking the PoeLLM malw

Bitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries

Cheap phones ship preinstalled malware

•

by Pierluigi Paganini / 21h

Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands that use MediaTek platforms. The malware is built into the device firmware and may be hidden in diffe

Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION

by Pierluigi Paganini / 23h

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Anthropic Restricts Live Internet Access After Claude Evaluation Failures Silent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files U

Oct 10, 2026

U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog

9 TTPs

•

by Pierluigi Paganini / 1d

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog : CVE-2015-3306 (CVSS score of 10.0) – An access control flaw in ProF

Anthropic Restricts Live Internet Access After Claude Evaluation Failures

Claude caused real-world security incidents

•

by Pierluigi Paganini / 1d

Anthropic’s models kept working around the rules on the live internet. The company published the cases. Anthropic released a report on unintended actions its Claude models took during evaluations and internal use. The cases involved real websites and real organizations outside the company. Anthropic says the impact was minimal, and it published them anyway. The report is meant to start a regular

Silent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files

Leaked chats allege 207M extortion

•

by Pierluigi Paganini / 1d

Silent Ransom Group allegedly extorted $207 million from 27 law firms in six months using phone calls and social engineering, not encryption. Silent Ransom Group doesn’t rely on encryption. No malware payload, no locked files, just phone calls and social engineering aimed almost entirely at law firms, and apparently it works extraordinarily well. A new leak of the group’s internal chats, first sh

Oct 9, 2026

US Sentences Empire Market Co-Creator Over $430 Million Criminal Marketplace

Empire cofounder gets 40 years

•

by Pierluigi Paganini / 2d

Empire Market co-creator Raheim Hamilton was sentenced to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades. The case against Empire Market shows how a dark web marketplace can become a major criminal business, bringing together drug trafficking, stolen credentials, personal data and hacking tools. “A Virginia man who co-created and operated “Empire Ma

End of feed