5/22-25/2026

~ The Cyber Beat
U.S. Forces Conduct Strikes in Iran, Central Command Says

Iran’s President Orders Reopening of International Internet Access, State Media Reports

Iran Moved Billions Through Binance to Fund Regime—Continuing Into This Month

The AI Era Is Creating a Bug Hunting Arms Race

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

Anthropic to Release Mythos-Class Models to the Public

One Job That Is Growing in the AI Era? Cybersecurity Experts.

CISA to Allow Researchers to Report Vulnerabilities to Exploited Bugs Catalog

Cyber Officials Brace for Lax AI Oversight

Krebs: Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware

Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

Krebs: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Italy Disrupts CINEMAGOAL Piracy App that Stole Streaming Auth Codes

Why the Supreme Court’s Chatrie Case Could Change the Meaning of Privacy in America

Meta Settles School District Lawsuit Claiming Addictive Design Harmed Students’ Mental Health		Trump Mobile Confirms It Exposed Customers’ Personal Data, Including Phone Numbers and Home Addresses

Hackers Steal Patient and Billing Data From German Hospitals via Third-Party Provider

Fake Streams, Counterfeit Merch and Other Scams: How Fraudsters Target F1 Fans

Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning

FBI Warns ‘Kali365’ Phishing Kit Hijacks Microsoft 365 OAuth Tokens

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

Ubiquiti Patches Three Max Severity UniFi OS Vulnerabilities

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

Published by The Cyber Beat

Leave a Reply