Cybersecurity briefing — 2026-05-14

An AI agent platform called PraisonAI got probed by scanners less than four hours after disclosure, and that should reshape how teams think about disclosure timing.

• PraisonAI Flaw Turns Exposed Agent APIs Into Targets
• Exchange Foothold Reused Across Three Intrusion Waves
• Same Payload Hit npm, PyPI, and Cemu Release
• Malicious node-ipc npm Versions Contain Stealer Backdoor
• Dream Market Admin Faces Cross-Border Money Laundering Cases
• SIMATIC HMI Panels Expose Browser Access via Help Link
• Ransomware Shutdown Hits Pharma Supply Chain Operations
• NGINX Rewrite Rules Expose Workers to Crafted Requests
• ROX Firmware Hides a Long CVE Backlog
• Exim BDAT Edge Case Opens Potential Code Execution
• WinRAR Archive Exploit Becomes a Persistent Spy Foothold
• The Gentlemen Scales to Hundreds of Victims Fast
• ROS# File Server Can Rewrite Its Own Files
• Robot Controller Flaw Can Alter Physical Process Behavior
• Manufacturing Message Flows Can Be Hijacked via Artemis
• Request Smuggling Lets Attackers Take Over Siemens Data Managers
• Some Siemens PLC Web UIs Still Lack Fixes
• TanStack supply-chain attack compromises OpenAI employee devices, certificates
• Belarus APT Filters Targets Before Spearphishing Govs
• Signed Security Binaries Became Seedworm’s Stealth Path