Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

The document is a security-news feed covering major vulnerabilities, active exploitation, breaches, espionage campaigns, malware, cloud and AI security incidents, and vendor patches. Notable items include a critical unauthenticated Zoom Workplace privilege-escalation flaw (CVE-2026-108186, CVSS 9.6), actively exploited Cisco BroadWorks and Openwave flaws, Git recursive-clone code execution (CVE-2026-111760), SGLang remote code execution, Xen Orchestra authentication bypass, AhsayCBS exploit chains, large-scale Microsoft patching, exposed AI application data, stolen cloud and AI credentials, CA