Keycloak authentication bypass, Microsoft active exploit, WordlistLoader/SynkLoader malware

This briefing highlights immediate security risks: a critical Keycloak pre-auth password-reset flaw enabling account takeover (patch available), Microsoft patching of 398 vulnerabilities including one actively exploited bug, new malware families (WordlistLoader, SynkLoader) delivering stealers and ransomware-adjacent payloads via ClickFix and phishing, Weedhack distribution through fake Minecraft clients, and a Snowflake extortion campaign affecting 165+ organizations — accompanied by prioritized mitigation actions.