SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 71

Security Affairs Malware newsletter Round 71, written by Pierluigi Paganini, was published on 16 November 2025 and presents a curated collection of malware-focused articles and research from across the international landscape. The piece describes itself as including a selection of the best articles and research on malware, with items ranging from NuGet package campaigns to ransomware and banking Trojans.

Among the linked stories are 9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads; GlassWorm Returns: New Wave Strikes as We Expose Attacker Infrastructure; Gootloader Returns: What Goodies Did They Bring?; Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector Persistence and Sophisticated C&C; Malicious NPM Package Found Targeting GitHub By Typosquatting on GitHub Action Packages; and DanaBot malware is back to infecting Windows after 6-month break.

The newsletter also highlights other pieces such as phishing campaigns targeting Booking[.]com hotels and customers, a Q3 2025 ransomware report, and analyses on threat actors and tooling, with the content presented in a concise digest intended for security professionals. Follow-up sections invite readers to subscribe and share and include related articles under Malware, Breaking News, and Hacking categories.