Security Affairs newsletter Round 565 by Pierluigi Paganini – INTERNATIONAL EDITION
2026-03-04T21:42:23Z•0663f4eda6e370b89385015fc971dbff8aecdd7331857e4bc45b94ee9b85b140
CVE-2026-21902.env-exposureblockchain-c2botnetdata-breachemergency-patchexposed-credentialsincident-responseinternet-outagemalwareremote-access-trojanrouter-rcesupply-chaintrojanized-software
What happened
Security Affairs Round 565 highlights multiple high-impact security events: two large retail breaches (Canadian Tire and ManoMano) exposing ~38 million accounts each; Juniper released an out-of-band patch for a critical PTX router RCE (CVE-2026-21902, CVSS 9.3); Microsoft warns of trojanized gaming utilities delivering a stealthy RAT using PowerShell, LOLBins and Defender-evasion; Qrator Labs uncovered the Aeternum botnet using Polygon smart contracts for decentralized C2; Iran experienced a near-total internet blackout amid US/Israeli strikes; Mysterium VPN found ~12 million exposed .env file
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 0663f4eda6e370b89385015fc971dbff8aecdd7331857e4bc45b94ee9b85b140
- Enrichment time
- 2026-03-04T21:42:23Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.