Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

The feed reports active exploitation and disclosure of multiple critical vulnerabilities across Windows, VMware vCenter, SAP Commerce Cloud, Adobe ColdFusion, Cisco firewalls, and Microsoft SharePoint. It also covers nation-state campaigns by Lazarus and Sandworm-linked actors, ransomware and botnets, malicious software supply-chain releases, compromised browser extensions, AI tooling abuse, and attacks against industrial infrastructure. Several vulnerabilities enable unauthenticated remote code execution or SYSTEM-level access, while others are confirmed exploited in the wild.