2m 30s Critical Xen Orchestra Flaws Exploited in Attacks A threat actor has been exploiting a critical-severity authentication bypass and a zero-day in Xen Orchestra, software maker Vates warns. A web-based…