New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Multiple high-impact vulnerabilities and active malware campaigns were reported. Notable items: an unauthenticated WordPress core RCE (wp2shell) with published mechanism and PoC; an OpenSSL denial-of-service (HollowByte) that can exhaust server memory; a cluster of malicious Vite npm packages using a blockchain-based C2 (ViteVenom) delivering a RAT; NadMesh botnet harvesting exposed AI services for AWS keys and Kubernetes tokens; a DigiCert incident tied to a GoldenEyeDog subgroup and theft of code‑signing certificates; multiple infostealers and droppers (ACR Stealer, TELEPUZ, ClickLock) using