Security Affairs newsletter Round 553 by Pierluigi Paganini – INTERNATIONAL EDITION

RadzaRat: New Android Trojan Disguised as File Manager Emerges with Zero Detection Rate

Chinese APT targets Uzbekistan     

Glassworm’s resurgence  

Malicious Rust Crate evm-units Serves Cross-Platform Payloads for Silent Execution  

Hacking

Anatomy of a Hacktivist Attack: Russian-Aligned Group Targets OT/ICS     

The Mystery OAST Host Behind a Regionally Focused Exploit Operation     

Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild

Uncovering a Calendly-themed phishing campaign targeting business ad manager accounts  

Attackers Actively Exploiting Critical Vulnerability in King Addons for Elementor Plugin 

Array Networks Array AG Series vulnerable to command injection  

A Hidden Pattern Within Months of Credential-Based Attacks Against Palo Alto GlobalProtect

Intelligence and Information Warfare

MuddyWater: Snakes by the riverbank

Researchers Capture Lazarus APT’s Remote-Worker Scheme Live on Camera

PRC State-Sponsored Actors Use BRICKSTORM Malware Across Public Sector and Information Technology Systems  

Intellexa Leaks: New Predator victims despite US sanctions 

China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) 

Cybersecurity

Korean e-commerce behemoth Coupang confirms leak of 33.7 million users’ data