Police boast of hacking VPN where criminals "believed themselves to be safe"

A roundup of mid‑2026 security news highlighting a surge in supply‑chain compromises (TeamPCP campaign, backdoored Daemon Tools, malicious element-data package, attacks against security vendors), multiple high‑impact vulnerabilities and exploit activity (a Chromium exploit published publicly, a Windows 11 BitLocker zero‑day, several severe Linux flaws including “CopyFail,” and an urgent ASP.NET issue), and large operational security failures (CISA credentials exposed on GitHub, Ubuntu infrastructure outage hampering patch coordination). Other notable items: law‑enforcement hacking of a VPN, a/