MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

The feed reports multiple active and high-impact cybersecurity threats, including supply-chain malware in an npm package, compromised Microsoft 365 credentials affecting 173 tenants, zero-day exploitation of BeyondTrust Remote Support, FortiOS exploitation delivering memory-resident malware, critical virtualization and application RCE vulnerabilities, phishing and adversary-in-the-middle campaigns, credential theft, and software-update tampering. Several vulnerabilities are under active exploitation or have public proof-of-concept activity, creating urgent patching and credential-protection 需求