Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

The feed highlights active exploitation of critical vulnerabilities and rapid attack chains across internet-facing infrastructure, including Cisco Secure Email Gateway, LiteSpeed Enterprise, GitLab, JFrog Artifactory, Gitea, Vite development servers, and cloud-connected systems. It also covers state-linked campaigns, phishing and passkey abuse, malicious browser extensions, supply-chain attacks, AI-assisted intrusion activity, confidential-computing attacks, and post-compromise lateral movement. Several reports describe root access, credential theft, arbitrary file reads, remote code execution