ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

The feed reports active exploitation and disclosure of multiple critical vulnerabilities, malware campaigns, supply-chain compromises, and nation-state operations. Notable items include pre-authenticated remote code execution in Orkes Conductor, Unbound DNS, Docker Sandboxes, Check Point management servers, and SolarWinds ARM; Linux kernel flaws added to CISA KEV; malicious npm packages delivering stealers; ClickFix phishing deploying ChainScript RAT; and activity attributed to Jade Sleet, Transparent Tribe, and Handala Hack.