Has CISA Finally Found Its New Leader in Tom Parker?

A broad DarkReading roundup highlights an elevated threat landscape: multiple high-impact vulnerabilities and active exploitation campaigns, worsening supply-chain and credential-theft risks, and novel AI-enabled attack techniques. Notable items include TrustFall research showing malicious repos can trigger code execution in popular CLIs (Claude Code, Cursor, Gemini, Copilot); a critical cPanel authentication-bypass with rapid proof-of-concept/zero-day activity; an unpatched PhantomRPC Windows privilege-escalation issue; a PoC showing Microsoft Edge stores recoverable passwords in process RAM;