Trezor warns users of email provider breach, phishing attacks

A BleepingComputer security digest covering active exploitation of enterprise vulnerabilities, phishing following a third-party email-provider breach, healthcare and vendor-related data breaches, Bluetooth device hijacking, ransomware claims, exposed Plex servers, AI-enabled fraud and abuse, and emerging zero-day threats affecting Microsoft Defender and Google Chrome. The highest-priority items are actively exploited Cisco Secure FMC and Chrome vulnerabilities, the Microsoft Defender zero-day enabling SYSTEM access, and compromise of F5 BIG-IP APM devices with a memory-resident rootkit and web