Cybersecurity briefing, 2026-05-24

Here's the trap with the Ghost CMS bug everyone's about to patch today: closing the SQL injection shuts the door, but the attacker already copied the keys to the building.

• Ghost SQLi Turns Sites Into Trusted Malware Launchpads
• Shared cPanel Hosts Face Root Compromise Risk
• Historical Packagist Tags Became a Provenance Trap
• Cross-Registry Package Attack Turns Ecosystems Into Trapdoors
• Wireshark 4.6.6 Also Updates the Capture Driver

Recent editions

• Saturday, May 23, 2026: Apex One Server Can Push Malicious Code Fleet-Wide · 14 stories
• Friday, May 22, 2026: Apex One Server Can Push Malicious Code Fleet-Wide · 18 stories
• Thursday, May 21, 2026: Malicious npm Release Exposed Secrets Before CVE Appeared · 18 stories
• Wednesday, May 20, 2026: Malicious npm Release Exposed Secrets Before CVE Appeared · 19 stories
• Tuesday, May 19, 2026: Critical Manufacturing Gear Exposed by PAN-OS Flaw · 20 stories
• Monday, May 18, 2026: React Server Components Face Hour-Scale Ransomware Risk · 13 stories
• Sunday, May 17, 2026: Checkout Plugin Settings Turn WordPress Stores Into Skimmers · 8 stories