Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

BleepingComputer security feed covering active exploitation of critical vulnerabilities, browser and endpoint zero-days, ClickFix malware delivery via compromised websites and blockchain-stored payloads, supply-chain compromise, large-scale data exposure claims, authentication threats, and notable service outages. The most urgent items are the actively exploited Citrix NetScaler authentication bypass and Chrome V8 zero-day, along with reported privilege escalation and malicious Terraform module distribution.