Atlassian’s critical Data Center flaw drew exploitation attempts within hours of a public proof of concept, Fortinet’s FortiMail email security gateway is under active attack with no patch available at disclosure, and a poisoned npm release published overnight is stealing developer secrets and wiping machines if victims revoke the stolen tokens. An abused company login exposed the personal data of roughly 8.8 million people in Denmark, and China-aligned hackers spent months posing as AI policy experts to phish their peers.