Security Affairs newsletter Round 574 by Pierluigi Paganini - INTERNATIONAL EDITION

Here are the key points from the Security Affairs newsletter:

1. Major ransomware groups like BlackCat and LockBit have been targeting Linux systems.

2. A new malware called Namastex.ai is compromising NPM packages with CanisterWorm malware.

3. Shai-Hulud, a self-propagating npm worm, has compromised Bitwarden CLI packages.

4. Kyber ransomware is now attacking both Windows and ESXi systems.

5. There's been attempted exploitation of the recently disclosed CVE-2023-33538 vulnerability.

6. A sophisticated DDoS attack disrupted Bluesky (Twitter's new platform).

7. Microsoft patched a critical ASP.NET Core privilege escalation bug (CVE-2026-40372).

8. ENISA released an updated Cybersecurity Market Analysis Framework (ECSMAF v3.0).

9. A new Linux local privilege escalation vulnerability called Pack2TheRoot was discovered.

10. There are reports of a Signal hack attempt against the president of Germany's parliament.

11. The NSA is reportedly using Anthropic's Claude Mythos AI model despite security concerns.

12. Mustang Panda malware group has targeted India's banking sector

Read the full article at Security Affairs

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.