Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer