Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

The feed reports widespread active exploitation, critical vulnerabilities, malware campaigns, supply-chain attacks, credential theft, ransomware activity, and AI-agent security risks. Notable incidents include actively exploited VMware vCenter, SAP Commerce Cloud, Apple macOS Screen Sharing, Ray, and MLflow flaws; critical GitLab and Forminator vulnerabilities; cloud and SaaS data theft; typosquatted RubyGems packages; Linux botnets; nation-state activity; and phishing campaigns. Several entries provide CVE identifiers and indicate severe or active exploitation, creating substantial risk to un