Rogue external MFA providers can steal passwords during logins

A BleepingComputer security-news feed covering active exploitation, zero-days, malware, phishing, data breaches, and security advisories. Key items include rogue external MFA providers used to steal passwords, exploited Zyxel and Check Point vulnerabilities, a critical unpatched D-Link router zero-day with public PoC, Linux kernel flaws under active exploitation, WordPress vulnerabilities enabling server-side PHP execution, AI-assisted Windows malware, and large-scale account compromise and data theft campaigns.