TheNde
Security· · 2 min

Supply Chain Attacks on the Rise.

Today in cybersecurity, we've got a mix of alarming vulnerabilities, exciting partnerships, and innovative tools. From supply chain attacks to active exploitation of critical flaws, the landscape is heating up. Here’s what you need to know to stay ahead.

In brief
  1. Supply Chain Attacks on the Rise
  2. Critical Vulnerabilities Under Attack
  3. Emerging Threats in AI
01 · Security

Supply Chain Attacks on the Rise

Credential-stealing worms compromise npm packages.
Credential-stealing worms compromise npm packages.

The recent Miasma supply chain attack is a stark reminder of the persistent threats lurking in software packages. Credential-stealing worms have compromised Red Hat npm packages, and OpenAI Codex tokens were pilfered in a similar npm supply chain breach. These incidents highlight the importance of scrutinizing external code dependencies.

02 · Security

Critical Vulnerabilities Under Attack

Old vulnerabilities can still pose serious risks.
Old vulnerabilities can still pose serious risks.

Palo Alto Networks is facing scrutiny as a newly discovered authentication bypass vulnerability in their PAN-OS is being actively exploited. Meanwhile, a 19-year-old Linux kernel flaw is allowing root access across multiple distributions. These breaches serve as a wake-up call for organizations to bolster their defenses.

03 · Security

Emerging Threats in AI

Integrating AI for proactive cybersecurity.
Integrating AI for proactive cybersecurity.

Cybercriminals are leveraging AI to enhance their phishing attacks, utilizing ChatGPT domains to deliver malware. Meanwhile, CrowdStrike is integrating AI into its security platforms, aiming to stay a step ahead of malicious actors. As AI continues to evolve, so too will the tactics of those looking to exploit it.

04 · Security

Messaging Scams: A Growing Concern

Scammers are using everyday messages to exploit victims.
Scammers are using everyday messages to exploit victims.

Kaspersky's latest report unveils a sophisticated network of messaging scams that exploit everyday communication. These scams are becoming increasingly organized and difficult to detect, taking advantage of user trust in familiar formats. Awareness and education are critical to combat these threats.

Key numbers
67%

Increase in new vulnerabilities reported between 2023 and 2025.

Source
1.6 days

Median time to exploit a vulnerability after disclosure, down from 4.2 months.

Source
82%

Percentage of malicious attacks on election-related groups that arrive via email.

Source
Top stories
SecurityWeek

Palo Alto Networks Vulnerability Exploited for Weeks

A critical vulnerability in Palo Alto's GlobalProtect has been actively exploited just days after its disclosure. With a CVSS score of 7.8, organizations are urged to patch it immediately to avoid unauthorized VPN access.

SecurityWeek

19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access

A vulnerability in the Linux kernel allows low-privileged users to gain root access, exposing numerous distributions. This highlights the need for continuous monitoring and patching, even for long-standing systems.

Quick links
  1. Microsoft fixes KB5089549 Windows security update install issuesMicrosoft resolves installation issues affecting the May 2026 Windows security update. — Bleeping Computer
  2. Hackers Used Meta’s AI Support Bot to Seize Instagram AccountsHackers exploited Meta’s AI bot to hijack Instagram accounts, showcasing a new vulnerability. — Krebs on Security
  3. WordPress Malware Campaign Hides Payloads in Steam ProfilesA malware campaign infects WordPress sites by embedding payloads in Steam profile comments. — Bleeping Computer
  4. China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & TaiwanChina-aligned threat actors are intensifying their attacks, with recent targets in the Czech Republic and Taiwan. — The Hacker News