MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

The feed reports multiple active and emerging cybersecurity threats, including supply-chain attacks, credential abuse, zero-day exploitation, critical remote-code-execution vulnerabilities, malware deployment, phishing, and cloud or virtualization escapes. Notable items include the MALFEX malicious npm package, compromise of a ConnectWise credential affecting 173 Microsoft 365 tenants, exploitation of BeyondTrust and Palo Alto Networks flaws, FortiOS exploitation, critical Linux guest-to-host memory disclosure, Next.js and Drupal RCE vulnerabilities, GhostAction GitHub account compromise, and