VMware Aria Operations’ CVE‑2026‑22719 command injection flaw has been added to CISA’s KEV catalog, prompting urgent patching and stricter access controls to thwart active exploitation.

Silver Dragon’s blend of public‑server exploitation and malicious email attachments shows that even well‑protected networks are vulnerable, highlighting the importance of endpoint hardening, secure email gateways, and continuous threat monitoring.

Malicious Laravel libraries on Packagist now carry a cross‑platform RAT—learn how to spot, thwart, and mitigate this threat through code review, lockfile hygiene, and proactive monitoring.