JDownloader site hacked to replace installers with Python RAT malware

Multiple high-risk incidents reported: the JDownloader website was compromised to serve malicious Windows and Linux installers (Windows payload a Python-based RAT); a fake OpenAI repo on Hugging Face distributed an info‑stealer; NVIDIA confirmed a GeForce NOW data breach affecting Armenian users; Trellix source-code was claimed by RansomHouse; and multiple zero-days were disclosed/exploited — notably a high-severity Ivanti Endpoint Manager Mobile (EPMM) RCE used in active attacks (CISA issued an urgent patch directive) and a new Linux local-privilege escalation dubbed “Dirty Frag.” Additional,