Knicks sent employees fake offer of championship rings in phishing test: Report

Ars Technica security RSS collection covering active exploitation, critical vulnerabilities, compromised TLS certificate authorities and registries, phishing, malware delivery, data exposure, IoT and AI-agent security risks, and emerging defensive changes. The most urgent items include suspected remote-code-execution flaws in PHP and Zimbra, exploitation of Plex vulnerabilities, hijacked Tor exit nodes, and unauthorized TLS certificate issuance. No specific CVE identifiers are provided in the feed metadata.