How a leaked builder of XWorm turned a remote access trojan into a surveillance kit

SecurityAffairs RSS collection covering active exploitation of critical vulnerabilities, malware evolution, AI-assisted cyberattacks, ransomware-related law enforcement activity, DDoS incidents, and attacks affecting operational technology and major organizations. Notable entries include CISA adding CVE-2026-104935 to the KEV catalog, GitLab CVE-2026-97229 with CVSS 10.0 enabling unauthenticated remote code execution, and active exploitation of SonicWall SMA 1000 CVE-2026-102255, a CVSS 10.0 unauthenticated SSRF flaw.