Hackers breach govt webmail while running parallel crypto fraud

BleepingComputer security feed containing reports on active exploitation of critical vulnerabilities, state-sponsored espionage, ransomware and fraud activity, cloud portal data theft, Android banking malware, malicious browser extensions, supply-chain risks, and account compromise. Notable items include active exploitation of VMware vCenter CVE-2026-59310, Adobe Commerce CVE-2026-71362, and Windows zero-day CVE-2026-68820, alongside attacks targeting government, defense, enterprise SaaS, payment cards, and customer data.