SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 97

This Security Affairs roundup highlights multiple high-risk incidents: Microsoft confirmed active exploitation of Exchange Server zero-day CVE-2026-42897 (added to CISA KEV), and threat actor Mr_Rot13 is actively exploiting CVE-2026-41940 for backdoor deployment. Other notable events include a WordPress Funnel Builder flaw being abused to inject e-skimmers into WooCommerce checkouts, a supply-chain compromise via malicious TanStack packages that impacted OpenAI (exposing repository credentials), the JDownloader site being hacked to replace installers with a Python RAT, and a new TrickMo mobile