Microsoft rolls out revamped Windows Insider Program

Multiple active security incidents and high-risk vulnerabilities were reported: ongoing exploitation of a Zimbra XSS affecting over 10,000 instances; active attacks leveraging a critical file‑upload flaw in the Breeze Cache WordPress plugin; a local privilege‑escalation flaw dubbed Pack2TheRoot in PackageKit enabling root access; Firestarter malware persisting on Cisco ASA/FTD/Firepower devices despite patches; a new UNC6692 ‘Snow’ malware campaign using Microsoft Teams to deliver a browser extension, tunneler, and backdoor; supply‑chain compromises (Bitwarden CLI npm package and Checkmarx KIC