A new Next.js CVE lets an attacker in right as the last breach closes. It's serious enough for full device takeover, and Eleven senses it before the team even confirms it. Astra catches the pattern and contains it, but new threats are already showing up.