SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 97

Multiple active and emerging threats reported: Microsoft Exchange Server zero-day CVE-2026-42897 (CVSS 8.1) is being actively exploited and was added to CISA’s KEV catalog; threat actor Mr_Rot13 is actively exploiting CVE-2026-41940 for backdoor deployment. Attackers are exploiting a critical WordPress Funnel Builder plugin vulnerability to inject e-skimmers into WooCommerce checkout pages. OpenAI suffered a TanStack supply-chain compromise that breached two employee devices and exposed repository credentials. Russia-linked APT Turla evolved its Kazuar backdoor into a stealthy P2P botnet for长期