Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

The feed highlights multiple high-impact cybersecurity developments, including actively exploited critical vulnerabilities, remote code execution and sandbox escapes, credential and token theft, supply-chain compromise, ransomware operations, espionage activity, and malware targeting Android, firmware, enterprise edge devices, and developer environments. Notable issues include Brotli decoder exploitation affecting Node.js and other software, PHP2Shell exploitation attempts, Pillow and Ruby/GitLab RCE flaws, CISA KEV additions, Microsoft 365 token replay, GitHub Actions secret theft, and UEFI/