Google Introduces Android Dev Verification Amid Openness Debate

This collection highlights a surge in active, high-impact cyber threats across software supply chains, critical infrastructure, and consumer platforms. Key items include active exploitation of critical Citrix NetScaler (CVE-2026-3055) and an urgent F5 BIG‑IP flaw (CVE-2025-53521), multiple package-repository supply‑chain compromises (axios npm hijack, TeamPCP PyPI compromises including LiteLLM/Telnyx), and rapidly proliferating malware-as-a-service offerings and stealers (Venom Stealer, Phantom Stealer, DeepLoad, EtherRAT). Campaigns also feature AiTM phishing targeting TikTok for Business, AI