Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscapeMalware NewsletterIronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime AI models may be capable of self-replicating without access to a datacenterXWorm Reborn: From infostealer to surveillance platform Hirudo: From Fake Updates to Patched Banking Apps The campaign that never stopped: tracking GhostAction from 2025 to 2026 Exposing AdFection How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary SpywareBREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTUREUnit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant An Italian Phishing Campaign Delivering an iOS Exploit Chain Malfex imgdecode npm native addon loaderCikaBika Bot: Inside a Discord RATTrigger Value Selection in Clean-Label Malware Backdoors: An Effectiveness-Detectability AnalysisPhantomware: a Data Augmentation Framework for the Detection of Emerging Malware CampaignsXGCN-GAT: An Explainable and Robustness-Aware Hybrid Graph Neural Network Framework for Android Malware DetectionGeometry-Aware Risk-Guided Active Learning for Malware Concept Drift Adaptation Follow me on Twitter: @securityaffairs and Facebook and MastodonPierluigi Paganini(SecurityAffairs – hacking, newsletter)