JDownloader site hacked to replace installers with Python RAT malware

Multiple active incidents and campaigns were reported: the JDownloader website was compromised to distribute malicious Windows and Linux installers (Windows payload: a Python-based RAT); a fake OpenAI project on Hugging Face pushed an infostealer; NVIDIA confirmed a GeForce NOW user-data exposure affecting Armenian users; Trellix source code was claimed leaked by RansomHouse; Ivanti Endpoint Manager Mobile (EPMM) has a high‑severity RCE exploited as a zero‑day (CISA ordered rapid federal patching); a new Linux local‑privilege escalation dubbed “Dirty Frag” provides root on major distros; Shiny