Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

The feed reports widespread active exploitation and emerging threats, led by critical unauthenticated remote-code-execution flaws in Issabel Framework, Cisco Secure Email Gateway, WSO2 API Manager, WooCommerce Wholesale Lead Capture, and other internet-facing software. Additional activity includes privilege escalation in Pixel modems, Acronis cPanel, Parallels Desktop, cloud credential theft from exposed Vite servers, browser and AI-assistant hijacking, ransomware and wiper campaigns, banking malware, espionage tooling, and rapid enterprise compromise. Multiple incidents involve exploitation,‑