Linux kernel RCE, FatFs firmware flaws, North Korea npm malware

**Executive summary:** A high-priority briefing detailing multiple active threats: a patched but critical Linux kernel privilege-escalation (CVE-2026-46242), seven unpatched FatFs flaws in millions of embedded devices, North Korea-linked malicious npm packages exfiltrating developer secrets, the disruption of the NetNut residential proxy botnet affecting ~2 million Android devices, and the Avalon modular malware framework used in multi-stage phishing campaigns; recommended actions include urgent kernel updates, vendor firmware checks, npm dependency audits, and credential rotation.