CVE-2026-45584 2

Vulnerability (CVE)

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

GitHub confirmed that a breach of its internal repositories came from an employee device compromised by a poisoned version of the Nx Console VS Code extension, allowing a cybercriminal group called TeamPCP to exfiltrate about 3,800 repositories. The Nx...

Threat Actors & Nation-State

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

Cyber Risks The Hacker News

Microsoft disclosed that CVE-2026-41091, a link-following privilege escalation flaw in Defender rated 7.8 on CVSS, and CVE-2026-45498, a denial-of-service bug rated 4.0, have both come under active exploitation in the wild. The flaws were fixed in...

Zero-Days & Exploits