One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

The feed reports active exploitation of critical vulnerabilities, malware campaigns, supply-chain compromises, and emerging AI-agent security flaws. Notable items include pre-authentication RCE in Orkes Conductor, actively exploited Zyxel and Linux kernel vulnerabilities, WordPress XSS-to-RCE and forced-theme-install chains, a SolarWinds ARM unauthenticated RCE, and a CVSS 10 Azure AI Foundry privilege-escalation flaw. It also covers credential and data theft campaigns, signed-driver abuse to disable endpoint defenses, North Korean operations, malicious npm packages, and risks from AI coding/-