Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

The feed reports active exploitation and disclosure of multiple critical vulnerabilities, including unauthenticated remote code execution in WordPress, F5 BIG-IP APM, Next.js, Check Point Security Management Server, and MikroTik RouterOS; container escapes; Android root escalation; supply-chain malware in Terraform, npm, and PyPI packages; ClickFix social-engineering campaigns; Android spyware; credential attacks against Microsoft 365; and emerging AI-assisted attack techniques. Several incidents involve zero-days or rapid exploitation, making patching, dependency verification, MFA, and attack