Top US officials mistakenly leaked war plans on Signal.

This news roundup reports several high-priority security issues: a critical set of unauthenticated RCE vulnerabilities in Kubernetes Ingress NGINX (CVSS 9.8) affecting roughly 43% of cloud environments and requiring immediate patching; a browser sandbox escape actively exploited in Chrome with a similar Firefox flaw now patched; a suspected Chinese-linked operation using fake headhunting firms to target former US federal workers and AI researchers; and a non-cyber operational security failure where senior US officials accidentally leaked war plans by adding a journalist to a Signal group chat.