"City-Forum" data-theft attacks target Salesforce, ServiceNow portals

A BleepingComputer security-news feed covering active exploitation, zero-days, malware, ransomware, social engineering, supply-chain abuse, and cloud-service data theft. Notable reports include exploitation of Adobe Commerce (CVE-2026-71362), a Windows zero-day used by Lazarus (CVE-2026-68820), an actively exploited Cisco ASA/FTD denial-of-service flaw, Microsoft SharePoint exploitation, Android NFC relay malware combined with SpyNote, fake VPN extensions, and ransomware using blockchain-backed infrastructure.