MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

The feed reports multiple significant cybersecurity developments, including active exploitation of vulnerabilities in enterprise software and security appliances, supply-chain and update-server compromises, credential theft, phishing, malware deployment, and critical remote-code-execution and virtualization flaws. Notable items include exploitation of BeyondTrust, FortiOS, PAN-OS, Langflow, AhsayCBS, Drupal, Next.js, and Linux kernel vulnerabilities, along with campaigns targeting GitHub accounts, Microsoft 365 tenants, Taiwan research organizations, CIS governments, and cloud environments.