SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

Security Affairs roundup covering major malware, cyberattack, vulnerability, and security research developments. Notable items include Iran-linked disruption of a UK power plant and attacks on U.S. water infrastructure; ToxicPanda 2.0 targeting Android banking applications; BADBOX-related malware compromising Android vehicle head units; a critical unauthenticated command-execution flaw in NASA/JPL AIT-GUI; the actively exploited Zimbra flaw CVE-2026-73570; cryptographic prompt/context injection affecting Grok chat confidentiality; payment-card expiry validation weaknesses; and multiple maximum