Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach

A security-news digest covering active exploitation of critical vulnerabilities, zero-days, malware campaigns, credential and token theft, supply-chain compromises, AI-assisted attacks, phishing, espionage, and infrastructure compromise. Notable issues include exploited Oracle PeopleSoft SSRF chaining, Adobe Commerce/Magento and PHP/Brotli RCE flaws, Apple CoreGraphics code execution, Microsoft Authenticator token theft, Tailscale SSH privilege-boundary flaws, Wasmtime sandbox escapes, and active campaigns targeting cloud accounts, e-commerce stores, cameras, repositories, and Android users.