Weekly cybersecurity roundup: FortiClient EMS infostealer, Trend Micro Apex One exploit, and crypto payment security
By
Help Net Security
Master baker tier. Every paragraph earns its place on the tray.
Summary
A weekly roundup of cybersecurity news, featuring an interview with Coinflow's CISO about crypto payment security under AI-driven threats, coverage of an infostealer malware delivered via a FortiClient EMS vulnerability, and details on an exploited Trend Micro Apex One flaw. The article aggregates notable security incidents, interviews, and videos from the past week.
Key quotes
· 3 pulledCrypto payment firms sit near the top of the target list for advanced persistent threat groups, and the workload on their security leaders keeps growing.
Malcolm Portelli, CISO at Coinflow, runs the company's security program from Malta.
Portelli sat down for this interview at the Span Cyber Security Arena conference.
You might also wanna read
CISA Adds Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to Known Exploited Vulnerabilities Catalog
CISA has added a new vulnerability (CVE-2026-0257) to its Known Exploited Vulnerabilities (KEV) Catalog, affecting Palo Alto Networks PAN-OS
cisa.gov·6h agoCISA Adds Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to Known Exploited Vulnerabilities Catalog
CISA has added a new vulnerability (CVE-2026-0257) to its Known Exploited Vulnerabilities (KEV) Catalog, affecting Palo Alto Networks PAN-OS
cisa.gov·6h ago
Microsoft warns of crypto mining malware disguised as fake downloads of popular PC utilities
Microsoft's Windows Defender team has uncovered a cryptocurrency mining campaign targeting PC enthusiasts. Scammers are manipulating search
techspot.com·14h ago
Google reports first evidence of hackers using AI to develop zero-day security exploit
Google has reported evidence of hackers using AI to develop a zero-day security vulnerability, marking the first time the company has observ
politico.com·15h ago
FBI warns healthcare sector about Silent Ransom Group impersonating IT support staff
The FBI has issued an alert about the Silent Ransom Group (also known as Luna Moth, Chatty Spider, and UNC3753), a cyber threat group active
aha.org·15h ago
Microsoft faces cybersecurity community backlash over Digital Crimes Unit threats against exploit disclosures
Microsoft is facing backlash from the cybersecurity community after threatening to use its 'Digital Crimes Unit' against security researcher
windowscentral.com·21h ago