Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

BleepingComputer security coverage reports active exploitation and emerging threats, including Midnight Blizzard/APT29 hotel Wi-Fi attacks targeting Microsoft 365 accounts, passkey hijacking on compromised Windows devices, ClickFix-delivered malware, infostealers and RATs, the actively exploited N-able N-central authentication bypass (CVE-2026-18577), major data breaches, supply-chain attacks, cryptographic wallet theft, and critical Rails Active Storage vulnerabilities with potential remote code execution.