Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Security news roundup covering active exploitation of critical vulnerabilities, malware and botnet campaigns, credential theft, phishing, supply-chain attacks, and risks to AI/LLM infrastructure. Notable items include the actively exploited Atlassian Data Center flaw CVE-2026-21589, Microsoft Exchange privilege escalation CVE-2026-96940, an unpatched unauthenticated LMCache remote-code-execution issue, FortiBleed credential harvesting, malicious npm packages delivering Overlord RAT and stealers, and attacks against exposed AI servers.