Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

The feed highlights active exploitation of critical vulnerabilities, credential theft, ransomware and backdoor campaigns, phishing and ClickFix social engineering, supply-chain and firmware implants, espionage activity, and emerging AI-agent abuse. The highest-risk items include unauthenticated remote code execution in Langflow, Ruby on Rails, WordPress, PaperCut, ServiceNow, routers, cPanel, and robotics platforms; exploitation of ownCloud and Cosmos EVM flaws; and state-aligned campaigns targeting network infrastructure and organizations.