Critical Marimo pre-auth RCE flaw now under active exploitation

Multiple high-impact security stories from BleepingComputer: a critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation and being used for credential theft. Significant supply-chain compromise at CPUID was used to serve malware via CPU‑Z and HWMonitor downloads. Nearly 4,000 Internet-exposed Rockwell Automation PLCs were identified as part of Iranian-linked targeting of U.S. industrial devices. Other notable incidents include a Smart Slider 3 Pro update hijack distributing backdoored WordPress/Joomla builds, a new LucidRook malware family