Cybersecurity briefing, 2026-05-19

A stealer that wears Microsoft, Apple, and Google badges at the same time defeats every single-vendor whitelist you run.

• Critical Manufacturing Gear Exposed by PAN-OS Flaw
• React Server Components Face Hour-Scale Ransomware Risk
• Default Linux Installs Exposed to Public Root Exploits
• Reaper Splits Trust Across Microsoft, Apple, and Google
• CISA Repo Leak Reaches Cloud and Pipeline Access
• FrostyNeighbor Quietly Filters Targets Before Delivery
• Drupal Patch Window Could Close Before Testing Does
• Malicious npm Publisher Mixes Theft and Botnet Payloads
• Deleted Go Repo Still Serves Malicious Module
• Mail Gateway Flaws Expose Traffic and Internal Access
• MFA and Password Reset Become the Attack Path
• Patched SonicWall VPNs Can Still Bypass MFA
• Robot Controller Flaw Can Alter Physical Process Behavior
• Full Card Dumps Now Feed Fraud and Identity Abuse
• Healthcare Breach Totals Keep Rising After Disclosure
• BadIIS Builder Turns IIS Abuse Into Commodity
• ABB CoreSense Flaw Can Fully Compromise Devices
• OAuth Consent Turns MFA-Protected Tenants Into Token Farms
• Router Firmware Cluster Spreads Risk Beyond One Bug
• OpenShell Sandbox Break Lets Agents Hide Malicious Actions

Recent editions

• Monday, May 18, 2026: React Server Components Face Hour-Scale Ransomware Risk · 13 stories
• Sunday, May 17, 2026: Checkout Plugin Settings Turn WordPress Stores Into Skimmers · 8 stories
• Saturday, May 16, 2026: Stray PHPUnit Test Files Keep Exposing Production Servers · 19 stories
• Friday, May 15, 2026: Stray PHPUnit Test Files Keep Exposing Production Servers · 20 stories
• Thursday, May 14, 2026: PraisonAI Flaw Turns Exposed Agent APIs Into Targets · 20 stories
• Wednesday, May 13, 2026: cPanel Control Plane Breach Threatens Entire Hosting Fleets · 19 stories
• Tuesday, May 12, 2026: cPanel Control Plane Breach Threatens Entire Hosting Fleets · 14 stories