Tomcat got your server?

A CyberWire Daily roundup summarizes several active and impactful cyber stories: critical Apache Tomcat RCE exploited in the wild shortly after public proof‑of‑concept, exploitation of a ChatGPT CVE with thousands of attacks, a new BitM technique enabling rapid session theft and MFA bypass, a Western Alliance Bank data breach tied to the Cleo incident affecting ~22,000 individuals, Chinese cyberespionage targeting Central European diplomats, plus extortion and regulatory/legal developments; links to source articles and a Threat Vector podcast episode are provided.