Interlock exploits CVE-2026-20131 zero-day since Jan 26, enabling root access on Cisco FMC, increasing ransomware risks.
LeakNet uses ClickFix via compromised sites to gain access, enabling stealth attacks and scalable ransomware operations.