Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

This newsletter roundup underscores a persistent and dangerous pattern: critical vulnerabilities across widely-deployed platforms — including Ivanti, GitLab, Cisco, Linux Kernel, Adobe Commerce, Drupal, and PHP — are being actively exploited while many organizations lag behind on patching. Threat actors, including nation-state groups like North Korea, are capitalizing on these unpatched systems to deploy malware, crypto miners, and ransomware. The presence of threats like the Yoba malware hiding crypto miners demonstrates that attackers are increasingly sophisticated in evading detection. When patches exist but are not applied promptly, organizations essentially leave known doors unlocked — a failure of both technical process and organizational discipline. The growing use of AI in cyberattacks further accelerates the window between vulnerability disclosure and exploitation, making rapid patch cycles non-negotiable.