CPUID watering hole attack spreads STX RAT malware

A batch of active cyber incidents and disclosures: threat actors conducted a watering‑hole compromise of the CPUID site to distribute STX RAT via fake CPU‑Z/HWMonitor installers; Adobe released emergency patches for an actively exploited Acrobat Reader vulnerability (CVE‑2026‑34621); Marimo notebook RCE (CVE‑2026‑39987) was exploited within hours of disclosure; attackers claimed control of Venice San Marco flood pumps while Censys found 5,219 internet‑exposed Rockwell PLCs at risk; Dutch EHR vendor ChipSoft suffered a disruptive ransomware attack; and supply‑chain/malware campaigns continue to