U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage

A cluster of high-impact security incidents and disclosures: multiple critical and actively exploited vulnerabilities were disclosed and patched (notably Citrix NetScaler, Oracle Identity Manager, Langflow, and Quest KACE SMA), while supply‑chain compromises around Trivy and Docker Hub have spread infostealers, a self-propagating CanisterWorm affecting npm packages, and GitHub Actions tags were hijacked to steal CI/CD secrets. Nation‑state and organized crime activity is highlighted — North Korean actors distributing StoatWaffle via malicious VS Code tasks, Russian-affiliated phishing against