Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

Infosecurity Magazine reports a broad range of active cyber threats, including multiple zero-days under exploitation, ransomware, banking trojans, botnets, phishing, credential and key exposure, state-linked espionage, cryptocurrency theft, and emerging risks involving AI agents and AI infrastructure. The most urgent items involve unauthenticated remote code execution, exploited Apple vulnerabilities, Citrix zero-days, compromise of cloud credentials, and attacks against critical or sensitive organizations.