Security Affairs newsletter rounds up major cyber threat stories

Security Affairs’ International Edition Round 602, drawn from Pierluigi Paganini’s weekly newsletter, compiles a selection of recent security stories across cybercrime, hacking, malware and related fields. The digest highlights multiple items with direct attributions to vendors, researchers and outlets, including U.S. CISA adding Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog, and separately adding GitLab and Cisco flaws to the same list.

It also notes the Drupal Commerce core vulnerability CVE-2026-118539 being exploited in the wild, and coverage of Yoba malware disguising a crypto miner behind legitimate OpenAI and Anthropic binaries. The roundup further references high‑impact events such as a $6.3 billion loss attributed to North Korea in a Binance-related attack, and linked items on remediation workflows, compromised Homeland Security data disclosures, and broader AI‑driven security concerns.

The digest points to a breadth of linked stories and analyses from Security Affairs and external sources, with entries covering critical CVEs, supply‑chain and cloud‑exposure themes, and AI‑assisted threats. Specific items named include CVE-2026-118539 (Drupal Commerce Core), U.S. CISA advisories for Ivanti Connect Secure, GitLab and Cisco, and the Binance‑related incident described in associated coverage.

The International Edition also curates related pieces such as analyses of how attackers leverage public AI tools, and snapshots of ongoing investigations and enforcement actions reported by various outlets. The newsletter presents these items as editorial selections for readers seeking a concise snapshot of notable security developments.