Get Out of Security Debt by Tackling the Exposure Problem

A broad DarkReading roundup highlighting an active, high-risk threat environment: widespread credential-harvesting campaigns have compiled working logins for tens of thousands of Fortinet devices, multiple zero-days and rapidly exploited flaws (including WinRAR CVE-2025-8088 and fast weaponization of Ivanti and Check Point bugs) are being used in the wild, and supply-chain worms (Miasma, IronWorm, Hades) continue to infect developer and repo ecosystems. Ransomware groups (INC, Qilin affiliates, Silent Ransom) are refining extortion tactics, while new malware families (fileless Phantom stealer,