Critical Marimo pre-auth RCE flaw now under active exploitation

This collection of security news highlights a critical pre-authentication remote code execution (RCE) flaw in Marimo now under active exploitation for credential theft, alongside multiple high-impact incidents: a supply-chain compromise at CPUID delivering malware via CPU‑Z/HWMonitor, a hijacked Smart Slider update pushing backdoors, and widespread exposure of Rockwell Automation PLCs targeted by Iranian-linked actors. Other notable items include new LucidRook targeted malware, VENOM phishing-as-a-service stealing executive Microsoft logins, a ransomware incident at healthcare vendor ChipSoft,