Today’s feed tracks FortiBleed’s shift into a ransomware access pipeline, agentic ransomware turning destructive, active Oracle EBS and SharePoint exploitation, NetNut disruption, malicious Edge extensions, Mustang Panda cloud abuse, libssh2 risk, and MCP tool poisoning.