⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More

**Weekly cyber roundup:** Active exploitation of critical vulnerabilities (notably PAN-OS CVE-2026-0300 and Ivanti CVE-2026-6973), multiple supply‑chain compromises and tampered installers (DAEMON Tools, JDownloader), emergence of resilient and evasive malware (Quasar Linux RAT with P2P and kernel rootkit, PCPJack, QUIC RAT), large-scale credential theft and data extortion claims (ShinyHunters), and widespread abuse of legitimate tooling and social engineering (RMM abuse, ConsentFix v3, ClickFix); urgent patching and heightened defensive monitoring are advised.