WordPress, 7-Zip RCE exploited; NadMesh steals AWS keys; ACR Stealer surge

THREAT LEVEL: HIGH — Multiple actively exploited vulnerabilities and active malware campaigns require immediate remediation: WordPress 'wp2shell' RCE now has public exploits and needs urgent patching; NadMesh botnet is harvesting exposed AI services to steal AWS keys at scale; Microsoft reports a surge in ACR Stealer infostealer activity; 7‑Zip fixed a critical RCE and should be updated; Abbott is investigating two separate breaches. Recommended actions include immediate patching, rotating keys/tokens, deploying or enhancing EDR and WAF protections, segmenting exposed AI services, and auditing logs for unauthorized activity.