SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 74

Security Affairs’ Malware Newsletter Round 74, written by Pierluigi Paganini and published on 7 December 2025, curates a selection of recent malware-focused articles and research from the international landscape. The roundup highlights analyses and threat briefings such as ShadowPad Attack Exploiting WSUS Remote Code Execution Vulnerability (CVE-2025-59287) and the Shai-Hulud 2.0 supply chain attack, which exposes thousands of npm repositories.

It also includes alerts about spyware that targets users of messaging applications, and reports from Morphisec on a Russian-linked StealC V2 campaign aimed at Blender users via malicious .blend files. Other items cover deception through fake adult websites delivering stealers via ClickFix, the ShadowV2 activity threatening IoT devices, and reports on Shai Hulud’s second supply-chain strike affecting Zapier, ENS, AsyncAPI, PostHog, and Postman.

The newsletter also features analyses of GitHub infrastructure activity linked to North Korea’s Contagious Interview npm attacks and related research papers on malware detection and detection performance.