Cybersecurity briefing — 2026-05-22
Apex One Server Can Push Malicious Code Fleet-Wide
Cloud Atlas Builds Redundant Paths Into Government Networks
Fake Course Certificates Turn Government Mail Into Trust Abuse
Shared Spyware Kit Reaches Telecom Networks
Local Linux Shells Become Root on Default Distros
FBI warns of Kali365 device-code phishing targeting Microsoft 365
Deleted GCP API Keys Stay Alive for Minutes
Hosting Firms Become Enforcement Targets in Influence Ops
Hiring Lures Now Deliver Stealthier Spyware
YAML Anchors Exposed Blind Spots in GitHub Workflow Scanning
Plaintext Payloads Expose Cross-Platform Node Stealer
ABB Charger Firmware Flaw Reaches Beyond App Crashes
Exchange and Fortinet Footholds Reach Industrial Control Networks
ABB B&R PCs Need Coordinated Fleet Patching
ChromaDB Model Trust Bug Opens Pre-Auth Server Takeover
LLM-Guided Fuzzing Shifts the Bottleneck Upstream
Hardware-Gated Driver Bugs Are Reachable From Userland
GitHub Actions Became a Secret-Stealing Conveyor Belt
Cybersecurity briefing — 2026-05-22
Apex One Server Can Push Malicious Code Fleet-Wide
Cloud Atlas Builds Redundant Paths Into Government Networks
Fake Course Certificates Turn Government Mail Into Trust Abuse
Shared Spyware Kit Reaches Telecom Networks
Local Linux Shells Become Root on Default Distros
FBI warns of Kali365 device-code phishing targeting Microsoft 365
Deleted GCP API Keys Stay Alive for Minutes
Hosting Firms Become Enforcement Targets in Influence Ops
Hiring Lures Now Deliver Stealthier Spyware
YAML Anchors Exposed Blind Spots in GitHub Workflow Scanning
Plaintext Payloads Expose Cross-Platform Node Stealer
ABB Charger Firmware Flaw Reaches Beyond App Crashes
Exchange and Fortinet Footholds Reach Industrial Control Networks
ABB B&R PCs Need Coordinated Fleet Patching
ChromaDB Model Trust Bug Opens Pre-Auth Server Takeover
LLM-Guided Fuzzing Shifts the Bottleneck Upstream
Hardware-Gated Driver Bugs Are Reachable From Userland
GitHub Actions Became a Secret-Stealing Conveyor Belt