Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data

Multiple high-impact security stories: a decades-old Squid proxy flaw dubbed “Squidbleed” (Heartbleed-style) can expose user data; attackers are actively exploiting a Gravity SMTP WordPress plugin to leak API keys, tokens and server info; a North Korean-linked supply-chain compromise injected malicious code into 140+ Mastra NPM packages targeting crypto extensions; and an unpatchable Usbliter8 boot exploit affecting millions of iPhones has a released PoC. Other notable incidents include the FortiBleed credential-harvesting campaign, ongoing Klue customer impact and breaches (including ShinyHun