Google publishes exploit code threatening millions of Chromium users

Multiple high-impact security incidents reported by Ars Technica: public release of Chromium exploit code threatening millions; a zero-day that defeats default Windows 11 BitLocker protections; severe Linux vulnerabilities (including CopyFail) with urgent patches; a monthlong supply‑chain backdoor in Daemon Tools; exposed CISA SSH keys and plaintext credentials in a public GitHub repo; an open‑source package (element-data) exfiltrating credentials; Microsoft emergency ASP.NET updates affecting macOS and Linux; and widespread disruption to services (Ubuntu infrastructure outage, Canvas attack).