Security Affairs newsletter Round 598 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter covering active exploitation of critical vulnerabilities, ransomware targeting critical infrastructure, macOS malware distributed through a fake Zoom installer, China-linked espionage using Microsoft 365 for command and control, AI-agent reconnaissance and SQL injection activity, and law-enforcement disruption of the KillSec ransomware group. Notable vulnerabilities include critical GitLab AI Gateway command execution, exploited Zammad session hijacking, and FortiMail path traversal vulnerabilities.