Browser-assembled malware, GitLab RCE exploit public, PTC manufacturing under attack

**TL;DR:** A high-priority intelligence briefing reports multiple active threats: a SourTrade malvertising campaign that fragments payloads and assembles malware in-browser on Windows, a public GitLab RCE PoC affecting self-managed instances, Cl0p-linked actors chaining PTC Windchill/FlexPLM flaws for unauthenticated RCE and data extortion, a Vatican prayer app API exposing ~700K users' PII, and other notable vulnerabilities and supply-chain mitigations—recommendations include immediate patching, network segmentation, auditing internet-exposed systems, and deploying detections for in-memory/runtime abuse.