Storybook dev server vulnerability CVE-2026-114125 (CVSS 9.4) enables code injection from malicious websites. Upgrade to 10.6.2, 9.1.21 or 8.6.19. Related Posts: Electrum Wallet Vulnerability Exploits RBF Fee Bumps Microsoft Ships Out-of-Band .NET Updates for Brotli Overflow and Linux Tarball Flaws Apache Camel Fixes Eight Flaws, Including High-Severity XXE in camel-saxon The post Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code appeared first on Daily CyberSecur

Socket links GlassWorm VS Code themes to malicious VS Code extensions with 8,000+ installs, including a Coca-Cola theme. See how to check yours. Related Posts: Moroccan Intelligence Deploys Vast Surveillance Panopticon DragonForce Backdoor Adds MQTT Fallback to Microsoft Teams TURN Command Channel New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes The post Socket Links Popular VS Code Color Themes to the GlassWorm Supply Chain Campaign appeared first on Daily C