SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 91

Security Affairs roundup covering multiple high-impact incidents: CISA added TrueConf client flaw CVE-2026-3502 (CVSS 7.8) to its Known Exploited Vulnerabilities list; CERT-EU attributed a European Commission cloud breach exposing data from ~30 EU entities to TeamPCP; a sophisticated $285M crypto heist (likely North Korea‑linked) drained funds from Drift. Other notable items include Qilin ransomware claiming a hack of German party Die Linke, an npm/axios supply‑chain compromise, the emergence of CrystalX RAT as a MaaS offering, a new macOS infostealer (“Infiniti Stealer”), a .cmd mail‑deliever