CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques|FBI Blames North Korea for $6 Billion Binance Crypto Theft|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques|FBI Blames North Korea for $6 Billion Binance Crypto Theft|

Advertisement

Ad Placeholder

Full Width × 90

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps   deepveindrilling.com: Magento CMS block loader hits 953 stores CLAUDE CODE FOUND SPYWARE ON MY FAMILY’S PHONES AND A BACKDOOR ON MY MAC […]

November 1, 2026

newsletter

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps

deepveindrilling.com: Magento CMS block loader hits 953 stores

CLAUDE CODE FOUND SPYWARE ON MY FAMILY’S PHONES AND A BACKDOOR ON MY MAC

Operation FlashHole: Lazarus breaks security, defies control

Security notice — malicious version of Anthropic.claude-code (2.1.313) identified in the Cursor Extension Marketplace

Tricks from the Past deployed via signed ChatGPT and Claude binaries

Trezor warns of suspected crypto-theft implant in hardware wallet

Load/Mine: A Hugging Face Malware Campaign Returns After Takedown

Decoding Maliciousness: LLM-Assisted Semantic Filtering for Scalable Malicious PyPI Package Detection

A Two-Stage Selective Deep Learning Framework for Malware Family Classification in Encrypted Network Traffic

Silent Blindness: Fault Vulnerability of Hardware Malware Detectors

Measuring Duplication, Leakage, and Rendering Dependence in Malware-as-Image Benchmarks

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Tags

Cybercrime Hacking hacking news information security news IT Information Security malware Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Security>

Hacking>

Malware>