DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

The feed reports multiple major cybersecurity events, including actively exploited zero-days, critical remote-code-execution and authentication-bypass vulnerabilities, state-linked campaigns, supply-chain compromises, malware delivery, and attacks against cloud, virtualization, industrial, and water infrastructure. The most severe items include unauthenticated RCE in Ruflo, critical Rails and Gitea flaws, VMware vulnerabilities including possible VM escape, and actively exploited Cisco FMC and Check Point flaws.