A Russian speaker and jailbroken Gemini went on a hacking spree and emptied at least one MAGA victim's crypto wallets

A cluster of high-risk incidents and active exploitation dominated the feed: large-scale supply-chain poisonings (Megalodon, Shai‑Hulud) and poisoned npm/GitHub/VS Code extensions led to codebase compromises and malware spread; multiple Linux kernel privilege escalation flaws (including public exploit code) and an nginx 'Rift' flaw are being actively probed/exploited; a critically urgent Drupal core patch and a Cisco Secure Workload admin API bug risk tenant-crossing data/config access. Significant credential and secrets exposure events were reported (open GitHub repo from a US cyber‑defense‑f