Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The document aggregates recent cybersecurity reports covering actively exploited vulnerabilities, malware campaigns, supply-chain compromises, credential theft, cloud and AI-agent security issues, and account takeover activity. The highest-risk items include critical unauthenticated RCE and injection flaws in Oracle PeopleSoft, WordPress, WSO2, Adobe Commerce, Microsoft SharePoint, MikroTik RouterOS, and Roundcube, several of which are actively exploited or listed in CISA's KEV catalog. Other reports describe ClickFix social engineering, macOS and Android spyware, malicious Terraform providers