DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

The feed reports a broad set of current cybersecurity threats, including DPRK-linked macOS malvertising and npm supply-chain activity, active exploitation of Cisco FMC, Check Point, Microsoft OWA, browser, and VMware vulnerabilities, critical remote-code-execution flaws in Rails, Ruflo, and Gitea, BYOVD and RAT campaigns, attacks on water-sector operational technology, and cloud isolation issues. Several vulnerabilities are actively exploited or enable unauthenticated compromise, arbitrary file disclosure, authentication bypass, remote code execution, or cross-tenant data access.