Supply chain attack at CPUID pushes malware with CPU-Z/HWMonitor

Multiple high-impact incidents reported: a supply-chain compromise of CPUID altered official CPU-Z/HWMonitor downloads to serve malware and Smart Slider 3 Pro updates were hijacked to push backdoored WordPress/Joomla builds. Active exploitation of an Adobe Acrobat/Reader zero-day since December, a new Lua-based LucidRook malware campaign targeting NGOs and universities in Taiwan, and VENOM phishing-as-a-service targeting senior executives were observed. Other notable events include Storm-2755 payroll pirate attacks against Canadian employees, a ransomware incident at Dutch healthcare vendor (Œ