Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION

This newsletter round-up highlights a recurring and dangerous pattern: widely-used platforms such as SonicWall, Apple products, and WordPress are being actively exploited in the wild, with CISA issuing emergency advisories to prompt urgent remediation. The root problem is that organizations consistently fail to apply available patches before threat actors — including sophisticated APT groups like APT29 — weaponize known vulnerabilities. Exposed servers and botnets like XCPE further demonstrate that unpatched and misconfigured internet-facing assets remain low-hanging fruit for attackers. This matters not only for individual organizations but also for critical sectors like banking, as demonstrated by breaches in South Korean financial institutions. Without a disciplined, risk-prioritized vulnerability management lifecycle, defenders will always be reacting too slowly to adversaries who move quickly once exploits are publicly known.