N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

The document is a threat-intelligence digest covering active exploitation, malware campaigns, phishing, credential theft, cloud compromise, and newly disclosed vulnerabilities. Several high-impact vulnerabilities are reportedly exploited in the wild, including flaws in WSO2 API Manager, Cisco Secure Email Gateway, Acronis Backup for cPanel/WHM, Google Pixel Cellular Modem, and WooCommerce Wholesale Lead Capture. Additional reporting describes browser-extension abuse, passkey phishing, exposed development-server credential theft, web shells, root privilege escalation, and state-linked espionage