Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway

Security news feed covering actively exploited vulnerabilities, cyberattacks, data exposure incidents, AI-agent security risks, supply-chain concerns, and defensive security research. Notable items include a critical Langflow remote-code-execution flaw under active exploitation, an actively exploited N-able N-central privilege flaw, an unauthenticated VeloCloud command-injection vulnerability, attacks targeting water systems and public Wi-Fi, and multiple prompt-injection and rogue-AI-agent incidents.