Security Affairs rounds up global malware research and threats

Security Affairs’ Malware Newsletter Round 122, published by Pierluigi Paganini on 8 November 2026, presents a curated collection of malware-focused articles and research from the international threat landscape. The piece positions itself as a roundup of standout analyses and findings, drawing attention to a variety of topics and investigations rather than reporting on a single, discrete incident.

The page lists multiple linked items, including research from Securelist, Cloud Google’s threat blog, and other vendor and researcher outlets, covering areas such as APT activity, botnets, exploit campaigns, and malware behaviour studies.

Among the highlighted items, readers are directed to analyses of “Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia,” a take on “Shutting the Door on the XCPE Botnet,” and explorations of “DarkBlinders: Inside an Active Espionage Campaign.” The newsletter also points to pieces on jailbreak-delivered adware, APT29 watering holes affecting mobile devices with n-day exploits, and backdoor deployments via compromised autoupdaters.

Additional items discuss specific malware families and attack surfaces, including cPGuard autoupdate compromise, control web panels with hidden backdoors, and broader empirical works on malware post-infection behaviour and technique identification. The article links to both security research blogs and peer-reviewed material, providing readers with direct access to the underlying analyses and related investigations.