Cybersecurity briefing — 2026-05-18
A stolen Microsoft 365 identity is not a single-account problem.
React Server Components Face Hour-Scale Ransomware Risk
Malicious npm Publisher Mixes Theft and Botnet Payloads
Four 'Claw Chain' CVEs Enable OpenClaw Sandbox Escape
Active npm supply-chain attack compromises @antv packages, uses Shai-Hulud clones
Healthcare Breach Totals Keep Rising After Disclosure
SHub 'Reaper' macOS infostealer spoofs Apple, WeChat, Miro
Structured Outputs Can Smuggle Malicious Payloads
PoC Turns rxgk-Only Linux Bug Into Root Risk
Debian 13.5 Refreshes Install Media, Not Your Live Fleet
Tycoon2FA Rebuilds Into Microsoft 365 Device-Code Phishing
Stray PHPUnit Test Files Keep Exposing Production Servers
Burst Statistics Bug Turns WordPress Admins into Backdoors
DAEMON Tools Build Pipeline Became the Attack Vector
Cybersecurity briefing — 2026-05-18
A stolen Microsoft 365 identity is not a single-account problem.
React Server Components Face Hour-Scale Ransomware Risk
Malicious npm Publisher Mixes Theft and Botnet Payloads
Four 'Claw Chain' CVEs Enable OpenClaw Sandbox Escape
Active npm supply-chain attack compromises @antv packages, uses Shai-Hulud clones
Healthcare Breach Totals Keep Rising After Disclosure
SHub 'Reaper' macOS infostealer spoofs Apple, WeChat, Miro
Structured Outputs Can Smuggle Malicious Payloads
PoC Turns rxgk-Only Linux Bug Into Root Risk
Debian 13.5 Refreshes Install Media, Not Your Live Fleet
Tycoon2FA Rebuilds Into Microsoft 365 Device-Code Phishing
Stray PHPUnit Test Files Keep Exposing Production Servers
Burst Statistics Bug Turns WordPress Admins into Backdoors
DAEMON Tools Build Pipeline Became the Attack Vector