LeakNet ransomware uses ClickFix, Deno runtime in stealthy attacks

This feed highlights multiple active and high-impact threats: LeakNet ransomware has adopted the ClickFix initial-access technique and now uses a Deno-based loader for stealthy deployments; CISA warned of an actively exploited flaw in Wing FTP Server that can be chained to remote code execution; a supply‑chain compromise of the AppsFlyer Web SDK spread crypto‑stealing JavaScript; Companies House suffered a data‑exposure bug; and Stryker experienced a large-scale device wipe via its Microsoft environment (no malware needed). Microsoft also pushed several urgent fixes and mitigation guidance for