ADT confirms data breach after ShinyHunters leak threat

Multiple active security incidents and vulnerabilities were reported: ADT confirmed a data breach after extortion threats from ShinyHunters; a new Firestarter malware campaign is persisting on Cisco Firepower/ASA/FTD devices despite updates; over 10,000 Zimbra servers are being actively exploited via an XSS flaw; and a critical Breeze Cache WordPress file‑upload vulnerability is under active exploitation. Other notable items include a Pack2TheRoot local privilege‑escalation flaw in PackageKit, a Bitwarden CLI npm package compromise that stole developer credentials, a Checkmarx KICS supply‑tool