Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

This news digest highlights multiple high- and critical-severity security incidents: an unpatched Argo CD repo-server flaw that can allow unauthenticated code execution and potential full Kubernetes cluster takeover (no CVE or fix reported); active exploitation of several disclosed vulnerabilities (e.g., Progress Kemp LoadMaster) and weaponization of recent RCEs (Langflow) to deploy miners and stealers; two critical prompt-injection/sandbox-escape flaws in Cursor (DuneSlide); and exploitation of SimpleHelp OIDC bypass to deliver new malware families. The feed also documents widespread malware/