Aura confirms data breach exposing 900,000 marketing contacts

Multiple high-impact incidents and active exploitations reported: Aura confirmed a data breach exposing ~900,000 marketing contacts (names and emails). CISA ordered federal agencies to patch an actively exploited Zimbra XSS flaw. ConnectWise fixed a cryptographic signature verification vulnerability in ScreenConnect that could allow hijacking and privilege escalation. The Interlock ransomware group has been exploiting a maximum‑severity RCE zero‑day in Cisco Secure FMC since January; separate ransomware incidents (Marquis) exposed ~672K records. The GlassWorm supply‑chain campaign hit 400+ Git