SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

Security Affairs RSS roundup covering malware, credential theft, critical-infrastructure intrusions, data breaches, cyber-espionage, phishing campaigns, supply-chain backdoors, ransomware, and exploitation of unpatched Zimbra servers. Notable activity includes Iran-linked targeting of U.S. water and energy control systems, hotel Wi-Fi hijacking for Microsoft 365 credential theft, UAC-0099’s fake Notepad++ plugin campaign against Ukrainian organizations, and Laundry Bear exploitation of vulnerable Zimbra deployments.