Laravel Lang packages hijacked to deploy credential-stealing malware

Multiple high-impact security events reported: a supply‑chain compromise of Laravel Lang localization packages where attackers abused GitHub version tags to publish malicious Composer packages that deploy credential‑stealing malware; active exploitation of a Trend Micro Apex One zero‑day; a newly disclosed, actively targeted critical SQL‑injection flaw in Drupal; maximum‑severity UniFi OS vulnerabilities patched by Ubiquiti and a maximum‑severity privilege escalation in Cisco Secure Workload; an accidental leak of an unfixed Chromium flaw that could enable background JS RCE; newly observed tel