⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

This week’s security news highlights several active exploits and attacks, including a widespread vulnerability in on-prem Exchange Servers, a Cisco SD-WAN controller compromise attributed to UAT-8616, and a significant supply chain attack orchestrated by TeamPCP targeting npm packages. The rapid exploitation of vulnerabilities and the evolving tactics of threat actors underscore the importance of proactive patching and vigilance, particularly concerning supply chain dependencies. The increasing use of AI in vulnerability discovery further accelerates the threat landscape.