← All stories

Breaches & incidents

Security Affairs Publishes Malware Newsletter Round 120

By Security Affairs1 min read

Security Affairs has released the 120th edition of its malware newsletter, a roundup featuring research on the GhostAction attack targeting GitHub users, Plex vulnerabilities exploited to drop a cryptominer, and a vulnerability in the WordPress Rank Math SEO PRO plugin.

Cover for a breaches story

Security Affairs has published the 120th edition of its malware newsletter, a recurring roundup that collects notable articles and research on malware from the international landscape. According to the source, this edition highlights several stories.

Among the featured items is an analysis titled "Auditing the auditor: Unmasking Apex Accelerator." The newsletter also covers an escalation of the GhostAction attack, which is described as targeting GitHub users. Another entry reports that vulnerabilities in Plex are being exploited in the wild to drop a cryptominer on affected systems. In addition, the roundup notes that the WordPress Rank Math SEO PRO plugin, version 3.0.123, is vulnerable; the item text does not specify the nature of the flaw.

The newsletter listing is truncated in the source item, indicating that further articles are included beyond those named. Because only the headlines are available, technical details such as vulnerability identifiers, affected versions beyond those mentioned, and remediation guidance cannot be confirmed here. Readers interested in any of these topics should consult the full Security Affairs newsletter and the original research it references.

Source: Security Affairs

Cover for a breaches story

Breaches & incidents

Cyberattack on Italy's Chamber of Deputies Highlights Hybrid Warfare Risks

A cyberattack targeted email accounts at Italy's Chamber of Deputies, including a parliamentary account assigned to Prime Minister Giorgia Meloni, Security Affairs reports. The outlet says the incident raises broader questions about hybrid warfare, transparency, and the defenses of European democratic institutions.

1 min read

AI-written summary Source: Security Affairs · Fetched

Cover for a breaches story

Breaches & incidents

Magento Skimmer Campaign Infects 953 Online Stores Across Five Domains

A criminal group has infected 953 online stores, most of them running Magento, in a web skimming campaign active since July 2025, according to Sansec researchers cited by Security Affairs. The attackers hide malicious code in CMS blocks and use five domains and bot filtering to evade detection.

1 min read

AI-written summary Source: Security Affairs · Fetched

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.