FBI warns of in-person data theft attacks from extortion gang

Multiple high-risk incidents and active exploit campaigns were reported across US and global targets: the FBI warned that the Silent Ransom Group (SRG) is conducting in-person data-theft extortion attacks against U.S. law firms; CISA ordered rapid patching of a critical, actively exploited LiteSpeed cPanel user‑end plugin vulnerability; a zero‑day in the KnowledgeDeliver LMS was abused to install the Godzilla web shell; Ghost CMS SQL injection (CVE-2026-26980) is being weaponized in a large ClickFix campaign; and the Kali365 phishing‑as‑a‑service platform is hijacking Microsoft 365 accounts by