Critical Linux kernel flaw allows remote root attacks on MPTCP servers

A security-news digest covering critical vulnerabilities, active exploitation, malware campaigns, supply-chain and third-party breaches, cryptocurrency theft, mobile-network signaling attacks, and defensive software updates. Highlights include remote root exploitation of MPTCP Linux servers, in-the-wild exploitation of GitLab and Drupal flaws, Cisco SD-WAN exploitation to deploy KeyDrift malware, a malicious Cursor extension installing SSH backdoors, and major cryptocurrency theft incidents. The digest also includes a specifically identified vulnerability, CVE-2026-20127, affecting Cisco SD-W