Every employee’s password was stored in a single Excel file

A roundup of security stories highlighting an active, high-risk threat environment: multiple zero-days and in-the-wild exploits (Microsoft/Windows, Chrome, Check Point VPN, Cisco SD‑WAN) and at least one critical Ivanti Sentry RCE that requires immediate patching. Supply-chain and malware activity is rising — open-source toolkits and npm package infections (Miasma, Shai‑Hulud) and reports of automated/self-spreading worms built with AI models. Large-scale breaches and data exposures continue (World Food Programme, Qilin/NHS, Oxford, government messaging platform), while credential-theft and OP