Security Affairs newsletter Round 557 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 557 – INTERNATIONAL EDITION was published on 04 January 2026, delivering a digest of the week’s security stories in one email. The roundup features items such as French authorities investigating AI “undressing” deepfakes on X, and thousands of ColdFusion exploit attempts spotted during the Christmas holiday.

It also highlights legal outcomes, including two U.S. cybersecurity professionals plead guilty in the BlackCat/Alphv ransomware case, alongside a Covenant Health data breach that impacted over 478,000 people. Other entries include a phishing campaign abusing Google Cloud Application to impersonate legitimate Google emails, IBM warning of a critical API Connect bug enabling remote access, and Trust Wallet confirming a second Shai-Hulud supply-chain attack with $8.5M in crypto stolen.

The digest also covers a Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems, and ongoing concerns such as a data breach at ESA and other security developments listed in the International Press section.