SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 74

Securityaffairs.Co •Pierluigi Paganini • December 7, 2025

Security Affairs Malware includes a collection of the best articles and research on malware in the international landscape Malware Analysis of ShadowPad Attack Exploiting WSUS Remote Code Execution Vulnerability (CVE-2025-59287) Shai-Hulud 2.0 Supply Chain Attack: 25K+ npm Repos Exposed Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications Morphisec Thwarts Russian-Linked […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShadowPad Attack Exploits WSUS Vulnerability Affecting 25K+ npm Repos The ShadowPad malware attack has exploited a remote code execution vulnerability (CVE-2025-59287) in Windows Server Update Services (WSUS). This incident has exposed over 25,000 npm repositories, allowing cyber threat actors to target users of messaging applications. Morphisec has reported that the attack is linked to Russian cyber operations. 2 sources 29

Extracted Entities

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 74

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Malware (2)

Vulnerabilities (1)