Cybersecurity briefing — 2026-05-19

A stealer that wears Microsoft, Apple, and Google badges at the same time defeats every single-vendor whitelist you run.

• Critical Manufacturing Gear Exposed by PAN-OS Flaw
• React Server Components Face Hour-Scale Ransomware Risk
• PoC Turns rxgk-Only Linux Bug Into Root Risk
• Reaper Splits Trust Across Microsoft, Apple, and Google
• CISA contractor exposed GovCloud credentials in public GitHub repo
• Belarus APT Filters Targets Before Spearphishing Govs
• Drupal Patch Window Could Close Before Testing Does
• Malicious npm Publisher Mixes Theft and Botnet Payloads
• Deleted Go Repo Still Serves Malicious Module
• Mail Gateway Flaws Expose Traffic and Internal Access
• MFA and Password Reset Become the Attack Path
• SonicWall VPN MFA Bypass Hits Patched, EOL Devices
• Robot Controller Flaw Can Alter Physical Process Behavior
• Full Card Dumps Now Feed Fraud and Identity Abuse
• Healthcare Breach Totals Keep Rising After Disclosure
• BadIIS Builder Turns IIS Abuse Into Commodity
• ABB CoreSense Flaw Can Fully Compromise Devices
• OAuth Consent Turns MFA-Protected Tenants Into Token Farms
• Router Firmware Cluster Spreads Risk Beyond One Bug
• OpenShell Sandbox Break Lets Agents Hide Malicious Actions