Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

Security news covering active exploitation of critical vulnerabilities, malware campaigns, exposed credentials, supply-chain compromise, botnets, and major data breaches. Key items include a critical unauthenticated GitLab GraphQL flaw (CVE-2026-19478), an actively exploited Ray vulnerability (CVE-2025-62593), and additional macOS, SharePoint, VMware vCenter, and Windows IKE flaws added to CISA’s KEV catalog. Other reports describe MacSync Stealer, the Evooo1Bot Mirai-based Linux botnet, a LiteLLM supply-chain attack, 50,000 exposed Stripe keys, and breaches affecting Heights Finance and SafeP