SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 80

According to Security Affairs, the Security Affairs Malware newsletter Round 80, authored by Pierluigi Paganini, was published on 18 January 2026 and gathers the best articles and research on malware in the international landscape. The issue presents a curated selection of items, including Gogs 0-Day Exploited in the Wild and SHADOW#REACTOR – Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment, among others.

It also features analyses such as “Untrustworthy Fund”: targeted UAC-0190 cyberattacks against SOU using PLUGGYAPE (CERT-UA#19092) and Hiding in Plain Sight: Deconstructing the Multi-Actor DLL Sideloading Campaign abusing ahost.exe, plus coverage of Magecart activity and malicious Chrome extensions. The newsletter describes a cloud of related research and reports, including VoidLink – A Stealthy, Cloud-Native Linux Malware Framework, and reviews of a range of malware and threat actor techniques. It also highlights content on how to detect and disrupt malicious campaigns, with links to various security blogs and ar ticles.