⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

This weekly security recap covers critical vulnerabilities, supply chain attacks, and widespread security threats discovered across major software platforms and infrastructure.

• •GitHub internal repository breach resulted from compromised Nx Console VS Code extension, with cybercriminal group TeamPCP exfiltrating approximately 3,800 repositories
• •A 9-year-old undetected Linux kernel vulnerability (CVE-2026-46333) enables unprivileged local users to execute arbitrary commands as root on default Debian, Fedora, and Ubuntu installations
• •Two actively exploited zero-day vulnerabilities in Microsoft Defender (CVE-2026-41091 and CVE-2026-45498) allow privilege escalation and denial-of-service attacks respectively
• •Drupal Core SQL injection vulnerability (CVE-2026-9082) came under active exploitation within days of disclosure, with over 15,000 attack attempts observed across 6,000 sites in 65 countries