Payouts King ransomware uses QEMU VMs to bypass endpoint security

Multiple high-risk incidents and active exploitation campaigns were reported: Payouts King ransomware is running hidden QEMU virtual machines and a reverse-SSH backdoor to bypass endpoint security; CISA flagged an actively exploited high-severity Apache ActiveMQ vulnerability; threat actors are exploiting recently leaked Windows zero-days and a Microsoft Defender “RedSun” PoC that can grant SYSTEM; a critical Marimo notebook flaw is being used to deploy NKAbuse malware from Hugging Face; and ZionSiphon malware is targeting water treatment/desalination OT environments. Additional notable events