Rails patches critical Active Storage flaw with RCE potential

The document is a BleepingComputer security-news feed covering critical software vulnerabilities, active exploitation, supply-chain compromises, data breaches, AI-assisted attacks, and attacks against critical infrastructure. Notable items include a critical Ruby on Rails Active Storage flaw with arbitrary file-read and potential RCE, a critical TeamCity authentication-bypass/RCE issue, critical VMware vulnerabilities including VM escape, malicious npm/AUR/PyPI activity, attacks on exposed water-sector PLCs, and multiple confirmed or alleged corporate data breaches.