Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers

The feed summarizes a wave of active threats and high-severity vulnerabilities: new malware families and campaigns (Speagle hijacking Cobra DocGuard for stealthy exfiltration, Perseus Android banking malware, GlassWorm repository poisoning, LeakNet and ClickFix-based delivery, Konni/EndRAT, MacSync, DRILLAPP espionage), exploit tooling (DarkSword iOS full-chain exploit kit), and widespread abuse techniques (BYOVD abuse of 34 signed vulnerable drivers to disable EDR). Multiple critical vulnerabilities are being actively exploited or disclosed — notably Cisco FMC insecure deserialization (CVE-‍2