PostHole
Compose
Login
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 86
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Technical Deep Dive: The Monero Mining Campaign Operation Olalampo: Inside MuddyWater’s Latest Campaign VShell and SparkRAT Observed in Exploitation of BeyondTrust Critical Vulnerability (CVE-2026-1731) Operation MacroMaze: new APT28 campaign using basic tooling and legit […]
ShinyHunters leaked the full Odido dataset
Claude code abused to steal 150GB in cyberattack on Mexican agencies
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 86
CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances
Security Affairs newsletter Round 565 by Pierluigi Paganini – INTERNATIONAL EDITION
Canadian Tire 2025 data breach impacts 38 million users
Microsoft warns of RAT delivered through trojanized gaming utilities
Aeternum botnet hides commands in Polygon smart contracts
iPhone and iPad are the first consumer devices cleared for NATO ‘RESTRICTED’ classification
Juniper issues emergency patch for critical PTX router RCE
How AI Aids Incident Response: Why Humans Alone Cannot Do IR Efficiently
12 Million exposed .env files reveal widespread security failures
ManoMano data breach impacted 38 Million customer accounts
Trend Micro fixes two critical flaws in Apex One
UAT-10027 campaign hits U.S. education and healthcare with stealthy Dohdoor backdoor
U.S. CISA adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog
Hackers abused Cisco SD-WAN zero-day since 2023 to gain full admin control
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries
Untrusted repositories turn Claude code into an attack vector
ShinyHunters cyberattack on CarGurus impacts 12.4 Million users
** Pierluigi Paganini
** March 01, 2026
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape
Technical Deep Dive: The Monero Mining Campaign
Operation Olalampo: Inside MuddyWater’s Latest Campaign
VShell and SparkRAT Observed in Exploitation of BeyondTrust Critical Vulnerability (CVE-2026-1731)
Operation MacroMaze: new APT28 campaign using basic tooling and legit infrastructure
Arkanix Stealer: a C++ & Python infostealer
North Korean Lazarus Group Now Working With Medusa Ransomware
Exposing the Undercurrent: Disrupting the GRIDTIDE Global Cyber Espionage Campaign
[...]