Security Affairs newsletter round 601 recaps the week's cyber stories
Original title: Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION
The October 25 edition is a headline index covering sanctions, ransomware, PHP flaws, spyware, and AI items, with no new reporting.
Security Affairs published weekly newsletter round 601, a compilation of its articles and international press. Listed topics include UK sanctions on Cryptomus, SafePay ransomware, a claimed AfD email leak, PHP issues labeled PHP2Shell, Plex exploitation, spyware, and several AI items. The post is an index of headlines rather than a report of one incident.
Unconfirmed: Figures and incidents appear only as newsletter headlines, not as reporting verified in this post.
- Headlines name CVE-2026-109618 and CVE-2026-109619 as PHP issues.
- Another listed item names CVE-2026-113380 in RingRTC used by Signal.
- An Africa crackdown is described as 1,462 arrests and over USD 105 million recovered.
- Anonymous hackers are said to claim a leak of 421,179 AfD internal emails.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-109619+1 related CVE | Use-after-free RCE in PHP via stale request globals | 9.2 | 100% | PoC ×13 | |
| CVE-2026-113380 | Call hangup bypass in Signal RingRTC before 2.72.0 | 9.3 | — |
From the original article
2 min read at securityaffairs.com
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.