Payouts King ransomware uses QEMU VMs to bypass endpoint security

A batch of BleepingComputer reports highlights a surge in active exploitation and novel attack techniques: Payouts King ransomware is abusing QEMU to run hidden VMs as a reverse-SSH backdoor to evade endpoint security; CISA warns of active exploitation of a high-severity Apache ActiveMQ flaw; multiple recently leaked Windows zero-days (including a Microsoft Defender “RedSun” PoC) are being used to gain SYSTEM privileges. Additional notable items include a critical Marimo notebook vulnerability used to deploy NKAbuse malware from Hugging Face, ZionSiphon OT malware targeting water treatment, a