German authorities identify REvil and GandCrab ransomware bosses

Multiple high-impact security stories: German BKA identified two Russian nationals as leaders of GandCrab and REvil ransomware operations (2019–2021). Active and emergent exploitation observed — Fortinet FortiClient EMS vulnerability (CVE-2026-35616) is being actively exploited, prompting emergency patches and a CISA order for federal remediation; React2Shell (CVE-2025-55182) is being abused in large-scale automated credential-theft campaigns; a leaked unpatched Windows privilege-escalation exploit dubbed “BlueHammer” enables SYSTEM elevation; and a new GPU Rowhammer technique (“GPUBreach”) on