Apple and Google patch actively exploited zero-days.

Multiple active threats are described: Apple and Google issued emergency patches for zero-days actively exploited in the wild (including a Chrome KEV entry), Google observed rapid, widespread exploitation of the high-severity React2Shell RCE by China-linked, Iranian, and criminal actors (with North Korean actors deploying new malware via this vector), and France’s Interior Ministry confirmed an email-server compromise. The report emphasizes active exploitation and urges immediate patching and investigation.