DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

A threat-intelligence roundup covering DPRK-linked macOS malvertising and npm supply-chain activity, state-sponsored campaigns, ransomware and RAT distribution, attacks against water infrastructure, and numerous newly disclosed or actively exploited vulnerabilities. The most severe issues include unauthenticated remote code execution in Ruflo, critical Rails and Gitea flaws, VMware vulnerabilities enabling authentication bypass or VM escape, and exploited Check Point and Cisco security-management flaws.