⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

Weekly security recap covers critical vulnerabilities and supply chain attacks impacting production environments.

• •Exchange Server CVE-2026-42897 (CVSS 8.1) exploited in the wild via XSS attacks
• •Cisco SD-WAN Controller CVE-2026-20182 exploited by nation-state actor for persistence and privilege escalation
• •TeamPCP supply chain attacks on npm packages deployed stealer malware harvesting cloud credentials
• •Malicious Hugging Face repository impersonated OpenAI model to distribute Rust-based stealer
• •AI tools like Daybreak and MDASH accelerate vulnerability discovery while creating dual-use risks

This summary was automatically generated by AI based on the original article and may not be fully accurate.