Cybersecurity briefing — 2026-05-27

Single-turn safety scores are a procurement trap, because real attackers don't stop after one prompt.

• Chatbot Answers Now Deliver Cryptojacking Lures
• AI Models Become Persistent Attack Operators
• SRG Moves Its Scam From Phones to Office Doors
• No-Code Android RAT Service Speeds Payload Churn
• Shared MachineKey Turns One LMS Bug Into Fleet Risk
• Telecom Breach Exposes the SaaS Trust Boundary
• Government Data Is Becoming a Resellable Abuse Asset
• npm Install Becomes a Claude Data Exfil Path
• Single-Prompt Safety Scores Miss Multi-Turn Hijacks
• Developer Lure Becomes Supply-Chain Tampering
• Phishing Services Now Steal Money in Real Time
• Pretalx Search Can Hand Over Organizer Accounts
• Private Gitea Images Were Publicly Pullable
• Session Tokens, Not Passwords, Are the Prize
• Defender’s New Quarantine Can Also Jam Response
• Site Member Access Can Break SharePoint
• Trusted Registry Logins Exposed 600,000 Records