Rails patches critical Active Storage flaw with RCE potential

A BleepingComputer security-news feed covering critical vulnerabilities, active exploitation, ransomware and supply-chain threats, data breaches, attacks against critical infrastructure, and emerging AI-assisted cyberattacks. Notable items include critical Rails Active Storage and JetBrains TeamCity flaws with potential remote code execution, VMware authentication bypass and VM-escape vulnerabilities, malicious Arch AUR and npm packages, attacks on exposed water-sector PLCs, and multiple high-impact corporate data breaches. The feed also highlights cryptocurrency theft, AI-enabled autonomous攻击