A federal watchdog has raised concerns about NIST's backlog in its vulnerability database. Google has addressed a zero-day vulnerability in its Android operating system. Citizen Lab has revealed a powerful new location-tracking platform. Malware commands are being hidden within Steam comments by attackers. Researchers have observed the use of AI in developing new malware. Red Hat's npm namespace has been compromised by malicious actors. The DriveSurge malware is being distributed through ClickFix and fake updates. FreePBX has patched a critical security flaw. Dashlane has responded to a brute-force attack targeting its users. An interview with Laure Lydon of Flo Health discusses digital health platform security.