Security Affairs newsletter Round 549 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs’ International edition for Round 549 arrives with a curated set of security stories, led by reports of China-linked hackers targeting a U.S. non-profit in a long-term espionage campaign. The roundup also highlights a new Italian citizen targeted with Paragon’s Graphite spyware, underscoring ongoing spyware abuse, and notes LANDFALL spyware exploiting Samsung’s zero-day CVE-2025-21042 in Middle East attacks.

Other items include Cisco fixing a critical UCCX flaw that could enable root command execution, and Cisco’s awareness of a new attack variant against Secure Firewall ASA and FTD devices. The newsletter also items Russia-linked APT InedibleOchotense impersonating ESET to deploy a backdoor on Ukrainian systems, and Clop ransomware group claiming the breach of The Washington Post.

Additional entries mention SonicWall’s September security breach attribution, North Korea-related sanctions over cybercrime finance, and a look at 2023 extortion attempts by former cybersecurity employees. The issue was published on 9 November 2025.