Ransomware gangs skip the CEO, head straight for the 40-something IT manager

A security news digest covering active ransomware and cybercrime campaigns, critical vulnerabilities under exploitation, attacks against water systems and cloud platforms, data breaches, supply-chain and AI-agent security risks, and emerging research on CPU side channels and defensive gaps. The most urgent items include active exploitation of an N-able N-central administrative flaw, an exploited Langflow remote-code-execution vulnerability, attacks targeting industrial water controllers, and phishing compromises of Microsoft 365 accounts with potentially sensitive defense data.