Weekly Cyber Security Newsletter Bulletin – EY Breach, Wpzshell Exploit, Notepad++ Flaws +20 Stories

This weekly threat roundup highlights multiple high-impact security issues: actively exploited Microsoft zero-days (SharePoint, ADFS), a widespread unauthenticated WordPress RCE (wp2shell) risking ~500M sites, a confirmed Ernst & Young data breach exposing client tax/investment documents, a malicious Chrome extension exfiltrating browsing histories from millions of users, and emerging AI-targeted techniques (GhostCommit and model+browser exploit chains), alongside patches from major vendors.