Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations

A threat-intelligence news digest covering active exploitation of vulnerabilities, ransomware and extortion, cloud and supply-chain breaches, malware campaigns, attacks against critical infrastructure, AI and LLM security risks, software-package compromises, cryptojacking, phishing, and evolving nation-state and cybercrime operations. Notable items include exploitation of CVE-2026-59310 in VMware vCenter shortly after disclosure, compromise of more than 1,500 UK charities through an exposed AWS access key, ransomware activity targeting Fortinet flaws and critical infrastructure, malicious npm,