Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes

A large cluster of high‑impact incidents and disclosures across cloud, developer supply‑chain, edge devices and AI tooling. Notable findings include two critical remote‑code‑execution bugs in n8n (CVE-2026-27577, CVE-2026-27493), critical SAP code‑injection and insecure deserialization fixes, Microsoft’s March patches (including public zero‑days), and CISA additions to the KEV list. Active exploitation and rapid post‑disclosure abuse are reported—FortiGate appliances are being leveraged to steal service account credentials, nx npm supply‑chain keys were abused by UNC6426 to gain AWS admin, a l