Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum

The Register aggregated a wave of active security incidents and threats: US cyber-defense warned of four actively exploited Microsoft vulnerabilities (including one patched 14 years ago and one tied to ransomware activity); an Adobe Acrobat/Reader zero-day has been used in malicious PDFs to profile victims and stage second-stage payloads; supply-chain poisoning attacks have infected popular open source tools and stolen secrets at scale; social-engineering on Slack impersonated a Linux Foundation official to harvest developer credentials and push a bogus root certificate via Google Sites; high‑