Posts in May 23, 2026

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

975825pwpadmin -
May 23
Ravie LakshmananMay 23, 2026Vulnerability / Website Security The U.S. Cybersecurity and Infrastructure Security […]
Read Article

Laravel Lang packages hijacked to deploy credential-stealing malware

975825pwpadmin -
May 23
A supply chain attack targeting the Laravel Lang localization packages has exposed developers […]
Read Article

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

975825pwpadmin -
May 23
A new “coordinated” supply chain attack campaign has impacted eight packages on Packagist […]
Read Article

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

975825pwpadmin -
May 23
Ravie LakshmananMay 23, 2026Software Supply Chain / DevSecOps GitHub has rolled out new […]
Read Article

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

975825pwpadmin -
May 23
Ravie LakshmananMay 23, 2026Artificial Intelligence / Vulnerability Anthropic on Friday disclosed that Project […]
Read Article

Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes

975825pwpadmin -
May 23
Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that […]
Read Article

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

975825pwpadmin -
May 23
Ravie LakshmananMay 23, 2026Supply Chain Attack / Malware Cybersecurity researchers have flagged a […]
Read Article

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

975825pwpadmin -
May 23
Ravie LakshmananMay 23, 2026Vulnerability / Web Security A maximum-severity security vulnerability impacting LiteSpeed […]
Read Article

An Example of Stack String in High Level Language

975825pwpadmin -
May 23
This week, I’m attending the SEC670[1] training (“Red Teaming Tools – Developing Windows […]
Read Article