ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

The feed reports a broad set of current cybersecurity developments, including active exploitation of critical vulnerabilities, ransomware and espionage campaigns, malware delivery through signed software and browser extensions, router and robot root compromise, AI-agent and prompt-injection risks, and major data theft incidents. The highest-priority items involve actively exploited PaperCut and ownCloud flaws, critical WordPress, ServiceNow, Next.js, cPanel, Cosmos EVM, and ZBT router vulnerabilities, as well as China-linked and Russian-linked intrusion activity.