Cybersecurity briefing, 2026-05-11

A malicious version of the Checkmarx Jenkins plugin slipped onto the official Jenkins Marketplace, sitting right inside the build pipelines that companies trust to scan their own code for vulnerabilities.

• cPanel Control Plane Breach Threatens Entire Hosting Fleets
• Backdoored Jenkins Plugin Hits CI Trust Boundary
• FCC Lets Banned Routers Receive Security Updates
• Crimenetwork’s Reboot Fails Under Rapid Cross-Border Pressure
• TrickMo Moves C2 Into TON Blockchain
• Geospatial Data Theft Reframes Espionage Risk
• Years-Long Phishing Crew Keeps Scaling Its Reach
• Two-Year Hidden Intrusion Exposed Water Sector Detection Gaps
• Unsupported ATutor Exposed to Reflected XSS
• Fake Claude Code Pages Turn Install Text Into Theft

Recent editions

• Sunday, May 10, 2026: cPanel Control-Plane Flaws Expose Hosted Sites · 1 story
• Saturday, May 9, 2026: cPanel Control-Plane Flaws Expose Hosted Sites · 6 stories
• Friday, May 8, 2026: vm2’s Sandbox Breakouts Multiply Beyond One Fix · 8 stories
• Thursday, May 7, 2026: DAEMON Tools Build Pipeline Became the Attack Vector · 18 stories
• Wednesday, May 6, 2026: DAEMON Tools Build Pipeline Became the Attack Vector · 19 stories
• Tuesday, May 5, 2026: Weaver E-cology flaw turned servers into command shells · 19 stories
• Monday, May 4, 2026: MOVEit Automation Auth Bypass Forces Full-Installer Upgrades · 11 stories