5/29-31/2026

Chinese Hackers Exploit Iran War to Target Maritime and Energy Companies

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

United Flight Forced to Turn Around Because of a Bluetooth Speaker Name

Anthropic Confirms Claude Mythos-Class Models Will Roll Out to the Public

UK Banks Still Lack Access to Mythos AI Model, BoE’s Bailey Says

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

Man Sent to Prison for Selling Data of 7 Millions Elderly Americans

U.S. Charges Google Security Engineer With Polymarket Insider Trading

California Attorney General Sues 23andMe Successor for 2023 Data Breach

Google Chrome Adds Session Cookie Theft Protection for All Users
Charter Communications Data Breach Affects 4.9 Million Accounts

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Lone Attacker Published 14 Malicious npm Packages Mimicking Popular OpenSearch, Elasticsearch Libraries

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

AI-Generated npm Malware Leaks Its Own GitHub Token

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

WP Maps Pro Bug Exploited to Create Admin Accounts on WordPress Sites

New CIFSwitch Linux Flaw Gives Root on Multiple Distributions

Name That Toon: Mark of (Cybersecurity) Progress