Anthropic-linked CVEs pile up, attackers mostly shrug

A security news digest covering actively exploited zero-days, critical vulnerabilities, malware campaigns, supply-chain and social-engineering attacks, data exposures, cybercrime operations, and emerging risks from AI agents. Notable items include zero-click attacks against Google Pixel devices, critical Cisco and GitLab flaws under active exploitation, a purported 0-click RCE affecting AI coding agents, North Korean fake-job campaigns infecting tens of thousands of devices, and attacks targeting software repositories and enterprise systems.