Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

The feed reports multiple significant cybersecurity incidents and vulnerabilities, including active exploitation of enterprise appliances, critical remote-code-execution flaws, cloud and SaaS credential compromise, software supply-chain malware, phishing, spyware, and AI-agent data exposure. The most severe items include a host-memory disclosure from guest VMs, zero-day exploitation of BeyondTrust Remote Support, active exploitation of PAN-OS, malicious npm packages targeting Windows and macOS, and compromise of Microsoft 365 tenants through ConnectWise credentials.