SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109

Security Affairs RSS roundup covering malware campaigns, webmail CSS-based credential and session attacks, a Metabase zero-day exploited in the wild, Progress LoadMaster command-injection RCE CVE-2026-8037 added to CISA KEV, a WordPress XSS-to-shell takeover chain, IT-support impersonation campaigns targeting financial firms, and a major healthcare data breach affecting 3.8 million patients. The most urgent items are the actively exploited Metabase zero-day and LoadMaster RCE, with additional high-impact risks from WordPress exploitation and credential theft.