Backdoored Telnyx PyPI package pushes malware hidden in WAV audio

Multiple high-impact security incidents reported: a backdoored Telnyx PyPI package was published that delivers credential‑stealing malware hidden inside a WAV file (supply‑chain/malware). A large campaign used fake Visual Studio Code security alerts in GitHub Discussions to trick developers into downloading malware. CISA warned of active exploitation of a critical Langflow vulnerability (CVE-2026-33017) that allows hijacking AI workflows. Other notable items include an Amazon cloud account breach affecting the European Commission, phishing attacks against TikTok for Business and the Dutch PolO