⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

Weekly cybersecurity roundup covering critical vulnerabilities, active exploitation, cyber espionage, malware, supply-chain compromises, phishing, DDoS, crypto theft, and large-scale botnets. Notable items include unauthenticated RCE in Langflow, actively exploited Ivanti and Drupal flaws, a 1.3 million-device Android botnet disruption, Linux and Windows government-targeting campaigns, AI-assisted malware and intrusion tooling, a trojanized Claude Code extension, and major cryptocurrency thefts.