Supply Chain Zero-Days and Ransomware Wave

Active exploitation of numerous CVEs: vCenter (CVE-2026-59310, CVSS 9.8) exploited by China-nexus actor, Babuk ransomware across 361 victims. Clop ransomware targets industrial giants via PTC Windchill/FlexPLM, 40+ victims including Fiserv. Akira ransomware uses Safe Mode to evade EDR. Gunra ransomware hit 50+ orgs (FBI/CISA/NSA advisory). ChainDrop worm in npm. Azure credential theft led to McDonald's and Vodafone breaches.