Hackers exploit file upload bug in Breeze Cache WordPress plugin

Multiple active security incidents and supply-chain compromises were reported: attackers are actively exploiting a critical unauthenticated file‑upload flaw in the Breeze Cache WordPress plugin; a malicious @bitwarden/cli npm package briefly published credential‑stealing malware; Trigona ransomware campaigns are using a custom CLI exfiltration tool; and Checkmarx KICS developer tooling (Docker images, VSCode/Open VSX extensions) was compromised to harvest developer data. CISA ordered federal agencies to patch a Microsoft Defender privilege‑escalation zero‑day dubbed “BlueHammer.” A new Mirai‑l