ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

Weekly cybersecurity roundup highlighting active exploitation, critical vulnerabilities, malware campaigns, AI-assisted attacks, supply-chain and cloud risks, industrial-control targeting, and data-exfiltration techniques. Notable incidents include exploited Zimbra command injection, critical Elementor Pro unrestricted upload leading to RCE, NASA AIT-GUI command injection risks, NetScaler authentication bypass, attacks against Siemens PLCs, Android banking malware, malicious browser extensions, and large-scale compromise of Dahua devices.