Critical Linux kernel flaw allows remote root attacks on MPTCP servers

A security news digest covering critical vulnerabilities, active exploitation, malware campaigns, supply-chain compromises, crypto theft, data breaches, and security incidents. Notable items include exploitation of a maximum-severity GitLab flaw, a critical Drupal Commerce Core access bypass, a Cisco Catalyst SD-WAN authentication bypass exploited to deploy KeyDrift malware, a Linux MPTCP remote-root vulnerability, malicious developer extensions planting SSH backdoors, and multiple cryptocurrency theft incidents.