Rails patches critical Active Storage flaw with RCE potential

Security news feed covering critical software vulnerabilities, cloud and enterprise data breaches, software supply-chain compromises, attacks on industrial control systems, AI-assisted cyber operations, malware distribution, and threat actor activity. Notable issues include unauthenticated arbitrary file read with potential RCE in Rails Active Storage, critical TeamCity authentication bypass leading to RCE, critical VMware flaws enabling authentication bypass and virtual machine escape, malicious AUR and npm package takeovers, and attacks targeting exposed water-sector PLCs.