Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

BleepingComputer security digest covering active exploitation of critical network appliance vulnerabilities, ransomware and extortion activity, malware campaigns, supply-chain and phishing-enabled ClickFix attacks, state-sponsored infrastructure compromises, and security guidance. The highest-priority items are the actively exploited SonicWall SMA1000 vulnerability (CVE-2026-102255), an exploited critical Citrix NetScaler RCE, unpatched AhsayCBS flaws used to deploy webshells and miners, and ransomware affecting Japanese cloud infrastructure.