Adobe ColdFusion RCE, Linux KVM escape, Gitea authentication bypass under active attack

This briefing reports multiple high-risk active threats: a critical Adobe ColdFusion RCE under active exploitation, an Iran-linked APT deploying a new modular C2 (Cavern) against Israeli IT providers, a 16-year-old Linux KVM guest-to-host escape (CVE-2026-53359) affecting Intel/AMD, rapid weaponization of a Gitea Docker authentication bypass (CVE-2026-20896), and a widespread phishing campaign targeting Google credentials; it urges immediate patching, threat hunts, enhanced logging/EDR, and MFA enforcement.