TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

The document is a security news feed covering active exploitation of high-severity vulnerabilities, malware and supply-chain campaigns, authentication bypasses, remote code execution, critical-infrastructure targeting, cloud and AI security issues, and mobile and browser threats. Notable items include actively exploited GitLab CVE-2026-19478 and Zimbra CVE-2026-73570, critical Cisco, NetScaler, Elementor Pro, isolated-vm, and NASA AIT-GUI flaws, malicious npm and Rust packages, Android banking and vehicle malware, and attacks abusing signed security drivers and OAuth flows.