Payouts King ransomware uses QEMU VMs to bypass endpoint security

Multiple active threats and exploit developments: Payouts King ransomware is abusing QEMU to run hidden VMs via a reverse‑SSH backdoor to evade endpoint defenses; CISA warned of active exploitation of a long‑undetected, high‑severity Apache ActiveMQ flaw; several recently leaked Windows zero‑days (and a public PoC for Microsoft Defender “RedSun”) are being used to gain SYSTEM/elevated privileges; a critical Marimo notebook vulnerability has been abused to deploy NKAbuse from Hugging Face; ZionSiphon malware targets water‑treatment OT environments; a new AI‑enabled ATHR vishing platform automa‑