In brief: multiple vendors fix zero-day across their products; the AdFection a zero-click spyware campaign routed targets to spyware servers; and more.
Users are strongly advised to update to patched versions of the products as soon as possible.
The suspects allegedly hosted and configured company-issued laptops at US locations, allowing overseas workers to access them remotely.
The zero-day vulnerability is CVE-2026-96951, a Windows Shell security feature bypass that allows attackers to circumvent the Mark of the Web security feature.
Kimsuky used fake conference invitations, research requests and malicious files to steal information, though most of the observed attacks were unsuccessful.
Tracked as CVE-2026-104935, the flaw allows remote attackers to bypass authentication without needing user interaction or special access.
The implants were hidden inside Ledger X devices and could capture information from the screen and button presses.
