Termite ransomware breaches linked to ClickFix CastleRAT attacks

Multiple high-impact security events and active campaigns reported: Velvet Tempest (Termite ransomware) leveraging ClickFix/InstallFix social-engineering to deploy DonutLoader and CastleRAT backdoors; widespread use of AI by threat actors to scale and automate attacks (including Bing-promoted malicious GitHub repos); a 3.4M-record data breach at Cognizant TriZetto exposing healthcare data; CISA emergency guidance to patch three iOS flaws exploited via the Coruna exploit kit; active exploitation of a critical WordPress User Registration & Membership plugin vulnerability to create admin accounts