WhatsApp phishing attack uses fake business docs to hack PCs

The collection highlights a broad surge in active threats across messaging phishing, supply-chain, credential-theft, and infrastructure compromise. Notable incidents include a WhatsApp phishing campaign delivering VBScript to gain remote access; the FortiBleed campaign using custom sniffers to harvest FortiGate credentials; a newly disclosed FFmpeg 'PixelSmash' flaw enabling potential RCE/DoS in widely used multimedia stacks; a Mastra AI npm supply-chain compromise attributed to North Korean actor Sapphire Sleet/BlueNoroff; the Klue OAuth breach and related Icarus extortion claims; a large Tex