Money launderer linked to $230M crypto heist gets 70 months in prison

Multiple active threats and high-impact incidents reported: over 10,000 Zimbra servers are being actively exploited via a reflected XSS flaw; a new local-privilege escalation dubbed “Pack2TheRoot” against PackageKit can yield root on Linux systems; and Firestarter malware persists on Cisco ASA/FTD appliances despite updates. Threat actors remain active — UNC6692 is deploying a custom ‘Snow’ malware suite via Microsoft Teams, extortion group BlackFile is linked to vishing and data theft, and ShinyHunters threatened ADT after an confirmed breach. U.S. utility vendor Itron disclosed unauthorized