Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

A collection of recent cybersecurity reports covering active exploitation, critical vulnerabilities, malware campaigns, supply-chain compromises, account hijacking, and attacks against cloud, industrial, mobile, WordPress, network, and space systems. Notable items include a Rust crate supply-chain attack, active exploitation of Zimbra CVE-2026-73570, a critical Elementor Pro file-upload RCE (CVE-2026-32475), NetScaler authentication bypass, Siemens PLC targeting, Android banking malware, and unauthenticated command execution against NASA AIT-GUI.