Fake VS Code alerts on GitHub spread malware to developers

Multiple active cyber incidents and developments: a large-scale campaign is abusing GitHub Discussions to post fake Visual Studio Code security alerts that trick developers into downloading malware; CISA warns of active exploitation of a critical Langflow vulnerability (CVE-2026-33017) used to hijack AI workflows; the European Commission is investigating unauthorized access to its Amazon cloud account. Other notable items include phishing-driven breaches at the Dutch National Police, a data/ticket-hijack incident at AFC Ajax, the takedown of the AnimePlay streaming app, UK sanctions on the Xin