Cybersecurity briefing — 2026-05-24

Here's the trap with the Ghost CMS bug everyone's about to patch today: closing the SQL injection shuts the door, but the attacker already copied the keys to the building.

• Ghost SQLi Turns Sites Into Trusted Malware Launchpads
• Shared cPanel Hosts Face Root Compromise Risk
• Historical Packagist Tags Became a Provenance Trap
• Cross-Registry Package Attack Turns Ecosystems Into Trapdoors
• Wireshark 4.6.6 Also Updates the Capture Driver