Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

The feed highlights active exploitation and disclosure of critical vulnerabilities, ransomware and malware campaigns, phishing operations, AI-agent security flaws, and targeted state-sponsored activity. Highest-impact items include unauthenticated RCE in Fastjson and PTC Windchill/FlexPLM, Bing server command execution as SYSTEM/root, AD domain-controller impersonation, Redis authenticated RCE, Linux local privilege escalation, and espionage exploiting a Zimbra zero-day. Multiple reports include public exploit code or confirmed exploitation, creating elevated patching and threat-hunting risk.