PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data

A collection of high-impact security stories from Ars Technica: a critical PeopleSoft 0‑day (Oracle) is being used to steal gigabytes from hundreds of organizations; multiple high‑severity/zero‑day flaws reported in Microsoft products (including one patched after researcher disclosure) and a Windows 11 BitLocker bypass; a single‑character use‑after‑free in the Linux kernel enabling sandbox escape/root; mass credential‑stealing malware found in Microsoft packages and dozens of Red Hat packages backdoored via the official NPM channel (supply‑chain compromise); Dashlane users had encrypted vaults