Cybersecurity briefing, 2026-05-30

• Poisoned Developer Tools Open Repo-Scale Credential Theft
• Malicious SDK Steals Banking Certificates
• Telecom Breach Exposes the SaaS Trust Boundary
• AI Blurs the Line in GREYVIBE Espionage
• ChatGPT Share Links Become a Trusted Phishing Host
• Chrome’s Memory-Safety Hot Zone Gets Another Big Patch
• Kimsuky Turns Fake Fixes Into Persistent Access
• Valid Provenance No Longer Proves Package Safety
• npm Install Becomes a Claude Data Exfil Path
• APT Campaigns Shift to Trust Chokepoints
• Residential Proxies Hide Abuse Behind Trusted IPs
• Scoped npm Packages Can Still Be Impersonators

Recent editions

• Friday, May 29, 2026: Residential Proxies Hide Abuse Behind Trusted IPs · 16 stories
• Thursday, May 28, 2026: Leak Count Exceeds Carnival's Formal Notice · 19 stories
• Wednesday, May 27, 2026: Chatbot Answers Now Deliver Cryptojacking Lures · 17 stories
• Tuesday, May 26, 2026: Ghost SQLi Turns Sites Into Trusted Malware Launchpads · 19 stories
• Monday, May 25, 2026: Ghost SQLi Turns Sites Into Trusted Malware Launchpads · 13 stories
• Sunday, May 24, 2026: Ghost SQLi Turns Sites Into Trusted Malware Launchpads · 5 stories
• Saturday, May 23, 2026: Apex One Server Can Push Malicious Code Fleet-Wide · 14 stories