Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software

A batch of high-impact cybersecurity stories: researchers uncovered a pre‑Stuxnet Lua sabotage framework (fast16) and multiple active campaigns and supply‑chain compromises (Bitwarden CLI/Checkmarx, malicious KICS Docker images, npm worm). CISA added four actively exploited flaws to its KEV list, and multiple high‑severity CVEs were disclosed and exploited rapidly (LMDeploy SSRF exploited within 13 hours; Cohere Terrarium sandbox escape; Microsoft ASP.NET Core privilege escalation; Apple notification‑data issue). Nation‑state and financially motivated malware activity was reported (FIRESTARTER