Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape
Malware Newsletter
ClawHavoc: 341 Malicious Clawed Skills Found by the Bot They Were Targeting ù
APT28 Leverages CVE-2026-21509 in Operation Neusploit
Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia
Analyzing Dead#Vax: Analyzing Multi-Stage VHD Delivery and Self-Parsing Batch Scripts to Deploy In-Memory Shellcode
The Shadow Campaigns: Uncovering Global Espionage
Knife Cutting the Edge: Disclosing a China-nexus gateway-monitoring AitM framework
Malicious dYdX Packages Published to npm and PyPI After Maintainer Compromise
Malicious use of virtual machine infrastructure
Detecting and Explaining Malware Family Evolution Using Rule-Based Drift Analysis
Malware Detection Through Memory Analysis
DIGITRACKER: An Efficient Tool Leveraging Loki for Detecting, Mitigating Cyber Threats and Empowering Cyber Defense
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
Pierluigi Paganini
(SecurityAffairs – malware, newsletter)

