Critical Marimo pre-auth RCE flaw now under active exploitation

Multiple high-impact security incidents reported: a critical pre-authentication RCE in Marimo is under active exploitation for credential theft; several supply-chain compromises delivered malware via CPUID (CPU-Z, HWMonitor) and hijacked Smart Slider updates for WordPress/Joomla; new targeted malware (LucidRook) and VENOM phishing-as-a-service campaigns are harvesting high-value Microsoft credentials; nearly 4,000 Rockwell PLCs were exposed in Iranian-linked attacks against U.S. industrial infrastructure; and a major international law-enforcement action identified over 20,000 cryptocurrency-f欺