Critical Isolated-vm Vulnerability Leads to RCE on Host

SecurityWeek RSS digest covering active exploitation, critical vulnerabilities, supply-chain compromise, cloud credential theft, and major security patch releases. Notable items include an isolated-vm type-confusion flaw enabling V8 sandbox escape and host-process RCE, a poisoned Rust arrayref release linked to North Korean operators, exploited Microsoft Entra ID and TrueConf vulnerabilities, active exploitation of Zimbra CVE-2026-73570, Operation CameraSwarm compromising approximately 14,000 Dahua cameras, and MLflow exploitation to access internal endpoints and steal cloud credentials.