Critical flaw in Protobuf library enables JavaScript code execution

Multiple high-impact security stories: a critical remote code execution vulnerability in protobuf.js has a published proof-of-concept enabling JavaScript code execution; CISA warns of active exploitation of a high-severity Apache ActiveMQ flaw; several recently leaked Windows zero-days and a Microsoft Defender zero-day ("RedSun") PoC are being abused for privilege escalation; Marimo notebooks are being exploited to deliver NKAbuse malware from Hugging Face; Payouts King ransomware uses QEMU VMs to evade endpoint defenses; and ZionSiphon malware targets water-treatment OT environments. The feed