Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data

A batch of high-impact security stories: “Squidbleed,” a decades-old Squid proxy vulnerability likened to Heartbleed, can expose user data; Gravity Forms SMTP plugin flaws are being actively exploited to leak API keys, tokens and server information; and a Mastra NPM supply-chain campaign (attributed to North Korean actors) injected a malicious dependency into 140+ packages to target cryptocurrency extensions. Researchers released an unpatchable Usbliter8 boot exploit affecting millions of iPhones, while Fortinet’s “FortiBleed” credential-harvesting campaign amassed a database of >86,000 valids