New Dolphin X malware uses AI to rank high-value targets

Multiple high-impact security incidents reported: new malware families (Dolphin X RAT with AI-based victim scoring, msaRAT that tunnels C2 through Chrome/Edge, and SectopRAT distributed via a fake Claude app malvertising campaign) and supply-chain style abuse of Notepad++ plugins to persist malware. Active exploitation of flaws observed — a patched Zimbra zero-click bug used by Russian state-linked Laundry Bear (Void Blizzard) and an actively exploited Check Point SmartConsole zero-day — alongside disclosure of a serious Linux XFS local privilege-escalation race condition (RefluXFS, CVE-2026-6