Pierluigi Paganini
May 31, 2026
Malware Newsletter
Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks
RemotePE: The Lazarus RAT that lives in memory
Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability
Introducing Showboat: A new malware family taunts defenses and targets international telecom firms
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet
Malware-Slop: New Malicious npm Package Leaks Its Own GitHub Private Token
Grandoreiro Malware Campaign Targets Europe and Latin America
The History of Fileless Malware – Looking Beyond the Buzzword
BTMOB: A stealthy RAT burrowing deep into Android devices
SEED: Semi-supervised Continual MalwarE Detection for Tackling ConcEpt Drift on a BuDget
Hybrid Intelligent Detection Approach for Android Malware Using Gradient-Boosting Tree Ensembles and Correlation–Differential Evolution Feature SelectionSelf-Organizing Neural Grove for Malware Detection in IoT Edge Devices
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
