Cybersecurity News

Cybersecurity 9 min

CYBERSECURITY · 30 May 2026 —

Threat Brief, Week of 18 May 2026: State-Backed Espionage in Malaysia, a Malware-Signing Takedown, and the Defender Itself Under Fire

Our weekly read of the threat landscape: a state-backed actor ran a bespoke espionage operation against Malaysian govern...

CY

Cyber Team

30 May

Cybersecurity 6 min

CYBERSECURITY · 30 May 2026 —

An LLM Agent Drove This Real Intrusion: Marimo RCE to Database Dump in Under an Hour

On 10 May an internet-exposed marimo notebook was breached through CVE-2026-39987 — and then an autonomous LLM agent too...

CY

Cyber Team

30 May

Cybersecurity 9 min

CYBERSECURITY · 26 May 2026 —

The AI SOC arms race lands in ASEAN: Flocks, Claude, and the agentic security stack of mid-2026

On 6 May 2026, Singapore-headquartered ThreatBook launched Flocks and SafeSkill — landing in an AI SOC category that alr...

JE

Jeffrey Tan

26 May

Cybersecurity 6 min

CYBERSECURITY · 25 May 2026 —

Three supply-chain incidents this week: Megalodon, Robinsons, and the Laravel-Lang Composer compromise

Megalodon pushed 5,718 malicious commits into 5,561 GitHub repos in six hours. The Payload ransomware group listed Singa...

JE

Jeffrey Tan

25 May

Cybersecurity 12 min

CYBERSECURITY · 22 May 2026 —

Laravel-Lang Supply Chain Attack — 233 Versions Backdoored Across 700 Repos in a Composer-Autoload Trick

On 22 May 2026, an attacker rewrote version tags across the Laravel-Lang ecosystem to deliver a 5,900-line PHP credentia...

CY

Cyber Team

22 May

Cybersecurity 12 min

CYBERSECURITY · 21 May 2026 —

Megalodon Campaign Backdoors 5,561 GitHub Repos in Six Hours — Inside the Largest GitHub Actions Supply-Chain Attack on Record

An automated campaign called Megalodon pushed 5,718 malicious commits to 5,561 GitHub repos between 18-21 May 2026, exfi...

CY

Cyber Team

21 May

Cybersecurity 8 min

CYBERSECURITY · 19 May 2026 —

Pwn2Own Berlin 2026 Pays Out $1.4M Across Three Days — Chrome Sandbox, Tesla Infotainment, Linux Kernel All Fall

The OffensiveCon Pwn2Own contest wrapped on Wednesday with $1.4 million paid out across 27 zero-days. A Chrome sandbox e...

CY

Cyber Team

19 May

Cybersecurity 9 min

CYBERSECURITY · 18 May 2026 —

Anthropic Says It Disrupted the First Reported AI-Orchestrated Cyber-Espionage Campaign Using Claude

In a public write-up, Anthropic describes threat actors who induced Claude — by posing as defensive testers — into mappi...

CY

Cyber Team

18 May

Cybersecurity 8 min

CYBERSECURITY · 18 May 2026 —

AWS Confirms First Production Prompt-Injection Compromise in Bedrock Agents — Enterprise Customer Exfiltrated Documents

In a quietly-published security bulletin, AWS confirmed an indirect prompt-injection attack in production Bedrock Agents...

CY

Cyber Team

18 May

Cybersecurity 8 min

CYBERSECURITY · 18 May 2026 —

Google Documents First Observed AI-Developed Zero-Day Exploit Tied to a Planned Mass-Exploitation Campaign

Google's Threat Intelligence Group has described what it believes is the first case of an AI-developed zero-day exploit...

CY

Cyber Team

18 May

Cybersecurity 3 min

CYBERSECURITY · 18 May 2026 —

Cisco Patches Sixth SD-WAN Zero-Day of 2026 — UAT-8616 Attribution from Talos

Cisco shipped an emergency advisory for CVE-2026-20182 on 15 May 2026, a peering authentication bypass in Catalyst SD-WA...

CY

Cyber Team

18 May

Cybersecurity 3 min

CYBERSECURITY · 18 May 2026 —

CISA Orders Federal Agencies to Patch Linux Kernel "Copy Fail" Zero-Day Within Two Weeks

A 732-byte Python script is all an unprivileged local user needs to take root on Ubuntu 24.04, RHEL 10.1, SUSE 16 and ne...

CY

Cyber Team

18 May