In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

This week's security news roundup covers a wide range of developments. Researchers from the University of British Columbia unveiled ICS-Sniper, a proof-of-concept attack that analyzes encrypted VPN traffic patterns to time packet-dropping against cloud-hosted SCADA systems, successfully disrupting a simulated water treatment plant. A researcher named Mootoo released a proof-of-concept for an unauthenticated remote-code-execution flaw in XWorm RAT's command-and-control panel (versions through 7.4), which they say has already been used against limited real-world targets. Separately, Burger King's Japanese app operator disclosed a breach exposing roughly 11 million member records, while XBOW researchers combined three now-patched bugs into a Chrome exploit chain that earned a $250,000 Google bounty. Also notable: a critical Langflow vulnerability, CVE-2026-105740, was seen being actively exploited more than two weeks before its public disclosure, and Intel confirmed it will retire SGX from Xeon processors after the upcoming Diamond Rapids generation.