Fake security tools on GitHub push backdoors and infostealers

A BleepingComputer feed reports active and emerging cybersecurity threats including malware distributed through fake GitHub security tools, exploitation of the Plex2Shell vulnerability chain against QNAP NAS devices, zero-day vulnerabilities in D-Link DGS-3130 switches, an OpenSSH authentication bypass affecting some musl-based Linux systems, phishing-as-a-service campaigns stealing Microsoft and Google credentials, and trojanized CWP web servers backdooring Linux hosts. It also covers significant credential and data exposures, including Chainalysis customer tokens and DigiCert customer data,: