⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

This week's cybersecurity recap covers supply chain attacks, botnet takedowns, and rapidly weaponized vulnerabilities across multiple platforms.

• •Trivy vulnerability scanner was backdoored to inject credential-stealing malware into CI/CD workflows, triggering a self-propagating worm called CanisterWorm across impacted projects.
• •The DoJ dismantled four Mirai-based IoT botnets (AISURU, Kimwolf, JackSkid, Mossad) that had amassed over 3 million compromised devices used for DDoS attacks.
• •CVE-2026-33017 in Langflow (CVSS 9.3) was actively exploited within 20 hours of disclosure, enabling remote code execution via missing authentication and code injection.
• •Interlock ransomware exploited Cisco FMC CVE-2026-20131 (CVSS 10.0) as a zero-day over a month before public disclosure, allowing unauthenticated remote code execution as root.