Cybersecurity briefing, 2026-05-21

• Malicious npm Release Exposed Secrets Before CVE Appeared
• Industrial Routers Become Reusable Botnet Infrastructure
• Shared Spyware Kit Reaches Telecom Networks
• Webworm Leaves Asia, Targets Europe Through Legacy Webmail
• Android Fraud Operation Targets Carrier Billing Systems
• Crypto Kiosks Become a Consumer-Fraud Flashpoint
• Public Exploits Turn Old Linux Bug Into Root Path
• ABB Charger Firmware Flaw Reaches Beyond App Crashes
• Drupal Patch Window Could Close Before Testing Does
• ABB B&R PCs Need Coordinated Fleet Patching
• Patched SonicWall VPNs Can Still Bypass MFA
• GMS600 TLS Sessions Exposed to Decryption Risk
• Robot Controller Flaw Can Alter Physical Process Behavior
• Request Tracker Link Clicks Can Hijack Browser Sessions
• Wallet Theft Now Scales Through User Approval
• SonicOS Scan Spike May Foreshadow Next Advisory
• One ODM Exposes Million-Camera Surveillance Corpus
• Malicious Images Can Trigger Commands in ExifTool on macOS

Recent editions

• Wednesday, May 20, 2026: Malicious npm Release Exposed Secrets Before CVE Appeared · 19 stories
• Tuesday, May 19, 2026: Critical Manufacturing Gear Exposed by PAN-OS Flaw · 20 stories
• Monday, May 18, 2026: React Server Components Face Hour-Scale Ransomware Risk · 13 stories
• Sunday, May 17, 2026: Checkout Plugin Settings Turn WordPress Stores Into Skimmers · 8 stories
• Saturday, May 16, 2026: Stray PHPUnit Test Files Keep Exposing Production Servers · 19 stories
• Friday, May 15, 2026: Stray PHPUnit Test Files Keep Exposing Production Servers · 20 stories
• Thursday, May 14, 2026: PraisonAI Flaw Turns Exposed Agent APIs Into Targets · 20 stories