Chinese Framework Powers 200,000 Scam Sites

This feed highlights multiple active threats and security developments: threat actors are using the legitimate DCloud Uni‑App toolkit to mass‑generate ~200,000 investment scam sites; AWS patched an Amazon “Q” vulnerability that enabled cloud credential theft via malicious repositories; PTC Windchill remote code execution (CVE-2026-12569) has been observed exploited in the wild and was added to CISA’s KEV; Russian APT Turla is deploying the ‘StockStay’ backdoor against Ukrainian government/military targets; Polymarket lost ~$3M after a third‑party vendor compromise; dozens of organizations were