New SynkLoader malware pushed in Microsoft Teams phishing campaign

BleepingComputer security feed containing reports on active exploitation of critical vulnerabilities, phishing and malware campaigns, exposed AWS credentials, supply-chain compromise, and data breaches. Notable items include SynkLoader delivered through Microsoft Teams phishing, actively exploited TrueConf Server and MLflow flaws, a maximum-severity Entra ID vulnerability, critical Elementor Pro RCE, FTP-banner malware delivery, a poisoned Rust crate, and thousands of valid leaked AWS keys.