New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Security news collection covering critical vulnerabilities, active exploitation, exposed industrial systems, supply-chain compromises, AI-agent security flaws, phishing and malware campaigns, data breaches, and cybercrime activity. Notable items include actively exploited TeamCity RCE CVE-2026-63077, critical Gitea file read CVE-2026-59774, Linux kernel privilege escalation CVE-2026-64531, KVM guest-to-host escape CVE-2026-64561, exposed Rockwell PLCs, malicious router backdoors, trojanized npm packages, and identity-based phishing campaigns.