Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

BleepingComputer security feed covering active exploitation of critical vulnerabilities, zero-days, supply-chain compromises, ClickFix malware delivery through compromised websites and blockchain-stored payloads, authentication threats, and major data breaches. The most urgent items include an actively exploited Citrix NetScaler authentication bypass (CVE-2026-19490), a Chrome V8 zero-day, a CrowdStrike Falcon privilege-escalation zero-day, and a critical ArubaOS-CX remote-code-execution flaw.