Multiple threat actors, both state-sponsored and financially motivated, are exploiting the CVE-2025-8088 high-severity ...
A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.
Strong security headers are implemented, including Content Security Policy (CSP) and X-Frame-Options, which helps protect against certain web attacks like clickjacking and cross-site scripting (XSS).