ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories

The document is a roundup of major cybersecurity developments, including actively exploited vulnerabilities, critical remote code execution and privilege escalation flaws, supply-chain compromises, cloud and AI abuse, data breaches, and state-sponsored campaigns. Key risks include zero-day exploitation of Zyxel switches, APT package tampering enabling root execution, critical Rails and Android flaws, Xen VM isolation failures, WordPress exploitation, compromised software update channels, and attacks targeting credentials, password managers, cryptocurrency infrastructure, and LLM resources.