Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

SecurityWeek feed covering actively exploited vulnerabilities in Arista VeloCloud Orchestrator and PTC Windchill, ransomware-linked and other data breaches, malware using hidden Windows desktops for covert access, AI security initiatives, and software supply-chain security policy changes. The most urgent items are the zero-day exploitation of an Arista VeloCloud Orchestrator OS command-injection flaw and exploitation of an unauthenticated PTC Windchill unsafe-deserialization vulnerability in ransomware campaigns.