Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

SecurityWeek reports active exploitation and significant security incidents, including a Siemens Software Center vulnerability abused in ClickFix malware campaigns, a critical Drupal core remote-code-execution risk, a compromised Rank Math PRO WordPress plugin supply chain, weaponized Plex server exploits, an exploited Fortinet flaw linked to a persistent FortiGate implant, and credential-based exposure of millions of student records. Additional items cover a ConnectWise cyberattack, MITRE ATT&CK updates, confidential AI technology, and cybersecurity workforce trends.