⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

Weekly cybersecurity roundup covering actively exploited vulnerabilities, critical remote-code-execution and authentication flaws, malware and botnets, state-sponsored espionage, phishing and social engineering, supply-chain compromises, crypto theft, DDoS activity, and data exposure. Notable items include critical Langflow flaws, LXD/MicroCloud client impersonation, Ivanti Connect Secure exploitation, Drupal Commerce authorization bypass, WordPress RCE attacks, a 1.3-million-device Android botnet, and multiple targeted campaigns against government and enterprise systems.