Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

The feed reports multiple significant cybersecurity developments, including active exploitation of critical vulnerabilities, state-sponsored intrusion campaigns, supply-chain compromises, malware distribution through npm and Android channels, and security flaws in AI coding tools and cloud platforms. The highest-risk items include pre-authenticated remote code execution in Orkes Conductor, Linux kernel vulnerabilities added to CISA KEV, critical Docker Sandbox and Unbound DNS flaws, and a CVSS 10 Azure AI Foundry privilege-escalation issue.