Infostealers Turn Millions of Devices Into Credential Theft Machines

A SecurityWeek feed highlights multiple high-impact threats: widespread infostealers are harvesting credentials at scale, fueling ransomware and cybercrime; a new Windows zero-day exploit dubbed “RoguePlanet” abuses a race condition in Microsoft Defender to achieve local privilege escalation to SYSTEM; Claroty researchers disclosed critical vulnerabilities in Vertiv UPS network cards and the Trane Tracer SC+ HVAC controller that could allow attackers to disrupt data-center environments; ServiceNow applied patches for a vulnerability reportedly exploited against some customers; and Fortinet and