GopherWhisper: new China-linked APT targets Mongolia with Go-based malware

Collection of Security Affairs reports covering multiple active threats: ESET uncovers a new China-linked APT dubbed GopherWhisper targeting Mongolian government institutions with Go-based loaders, injectors, and backdoors; Trigona ransomware actors have moved to a custom command-line exfiltration tool to speed data theft and evade detection; a critical Breeze Cache WordPress plugin vulnerability (CVE-2026-3844, CVSS 9.8) is being actively exploited at scale; CISA added several flaws (including CVE-2024-7399) to its KEV catalog. Additional notable items: persistent FIRESTARTER backdoor on a U.