Cybersecurity briefing — 2026-05-20

The CVE showed up nine days after the credentials were already gone.

• Malicious npm Release Exposed Secrets Before CVE Appeared
• Critical Manufacturing Gear Exposed by PAN-OS Flaw
• Industrial Routers Become Reusable Botnet Infrastructure
• Crypto Kiosks Become a Consumer-Fraud Flashpoint
• Webworm Leaves Asia, Targets Europe Through Legacy Webmail
• Android Malware Used 250 Fake Apps for Carrier Billing Fraud
• Drupal core patched for CVE-2026-9082 SQL injection vulnerability
• Reaper Splits Trust Across Microsoft, Apple, and Google
• Belarus APT Filters Targets Before Spearphishing Govs
• CVE-2026-8153: Command Injection in Universal Robots PolyScope 5
• One ODM Exposes Million-Camera Surveillance Corpus
• Mail Gateway Flaws Expose Traffic and Internal Access
• Attackers Exploit CVE-2024-12802 on SonicWall Gen6 SSL-VPNs
• ChromaDB Model Trust Bug Opens Pre-Auth Server Takeover
• Full Card Dumps Now Feed Fraud and Identity Abuse
• Malicious Images Can Trigger Commands in ExifTool on macOS
• ABB CoreSense Flaw Can Fully Compromise Devices
• Claude Code Sandbox Bypass Breaks Outbound Trust
• Hidden Browser Scareware Evades Scanners at Scale