
Dutch police takes down bulletproof hosting hub linked to 80+ cybercrime cases
Microsoft mitigated the largest cloud DDoS ever recorded, 15.7 Tbps
Jaguar Land Rover confirms major disruption and £196M cost from September cyberattack
North Korean threat actors use JSON sites to deliver malware via trojanized code
RondoDox expands botnet by exploiting XWiki RCE bug left unpatched since February 2025
Five admit helping North Korea evade sanctions through IT worker schemes
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 71
Security Affairs newsletter Round 550 by Pierluigi Paganini – INTERNATIONAL EDITION
Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack
U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog
Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely
Millions of sites at risk from Imunify360 critical flaw exploit
Critical FortiWeb flaw under attack, allowing complete compromise
Germany’s BSI issues guidelines to counter evasion attacks targeting LLMs
Washington Post notifies 10,000 individuals affected in Oracle-linked data theft
Chrome extension “Safery” steals Ethereum wallet seed phrases
A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet
U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog

