Microsoft now lets admins uninstall Copilot on enterprise devices

This feed reports multiple high-impact security events: active exploitation of a critical Breeze Cache WordPress file-upload flaw; a malicious @bitwarden/cli npm package that stole developer credentials; a Checkmarx KICS supply-chain compromise (malicious Docker images and extensions); Trigona and Kyber ransomware activity (Kyber experimenting with post‑quantum Kyber1024); and a Mirai campaign exploiting CVE-2025-29635 in EoL D‑Link DIR‑823X routers. CISA ordered federal patching for a Microsoft Defender privilege‑escalation zero‑day dubbed “BlueHammer,” and a new GopherWhisper state‑linked A