SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

Security Affairs feed (26 Jul 2026) highlights multiple active and emerging threats: supply‑chain and open‑source compromises (SleeperGem: malicious git_credential_manager, Dendreo, fastlane RubyGems dropping a persistent backdoor; fake Notepad++ plugin used by UAC‑0099), large-scale credential harvesting via compromised hotel Wi‑Fi gateways redirecting guests to fake Microsoft 365 login pages, ransomware activity (Chaos with msaRAT), and mass phishing/malware distribution campaigns (AgentBaiting delivering malware via fake AI skills/MCP servers). Nation‑state and espionage activity is also a重