Kodak confirms data breach claimed by ShinyHunters extortion gang

Multiple high-impact security developments reported: Kodak and iRhythm confirmed data breaches (ShinyHunters claimed the Kodak incident). CISA warned of an actively exploited LiteSpeed cPanel plugin flaw (CVE-2026-54420). Critical Fortinet FortiSandbox vulnerabilities are being actively exploited. A range of malware and abuse campaigns were observed — malicious JetBrains Marketplace plugins stealing AI API keys, the new Rokarolla Android banking trojan targeting 217 banking/crypto apps, Steam Workshop used to distribute malware via Wallpaper Engine packages, and Windows variants of SprySOCKS/T