Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

SecurityWeek RSS roundup covering active exploitation of critical vulnerabilities in WordPress, Drupal Commerce, GitLab, Palo Alto firewalls, and other products; a supply-chain attack that drained more than $2 million from Polymarket users; cybercrime infrastructure seizure; geopolitical hacking activity; and authentication and AI security developments. Explicitly identified vulnerabilities include CVE-2026-97229 in GitLab, enabling unauthenticated remote code execution, and CVE-2026-111585 in TeamViewer, an integer overflow enabling arbitrary code execution. Overall risk is elevated because-­