New ‘LucidRook’ malware used in targeted attacks on NGOs, universities

A batch of BleepingComputer reports highlights widespread, active threats and incidents: a new Lua-based malware dubbed LucidRook used in targeted spear-phishing against NGOs and universities in Taiwan; VENOM, a phishing-as-a-service platform targeting C-suite Microsoft credentials; Smart Slider 3 Pro update system hijacked to push backdoored WordPress/Joomla plugins; ongoing exploitation of an Adobe Acrobat/Reader zero-day since December; a critical Ivanti Endpoint Manager Mobile (EPMM) flaw that CISA ordered federal agencies to patch; a ransomware outage at Dutch healthcare vendor ChipSoft;$