New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

The feed reports multiple high-impact cybersecurity developments, including actively exploited zero-days, unauthenticated remote code execution, container and virtualization escapes, critical WordPress and Next.js flaws, malicious npm packages, phishing services, and malware campaigns. The most severe items include exploited F5 BIG-IP APM and VeloCloud vulnerabilities, a CVSS 9.8 Bifrost command-execution flaw, Chrome-Windows zero-day exploitation, and Linux kernel flaws enabling host compromise. Organizations should prioritize vendor patches, exposure assessment, threat hunting, and supply-​​