SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 91

This roundup highlights multiple high-impact incidents and new malware activity: a $285M cryptocurrency heist likely linked to North Korea using nonce/multisig manipulation to drain Drift; a European Commission cloud breach attributed to TeamPCP that exposed data from ~30 EU entities; and CISA adding TrueConf Client flaw CVE-2026-3502 (CVSS 7.8) to its Known Exploited Vulnerabilities catalog. New and evolving malware/malware-as-a-service activity includes CrystalX RAT (Telegram-based MaaS with spyware/stealer/RAT features), Infiniti Stealer targeting macOS, RoadK1ll (WebSocket-based pivoting/​