Daily Signal - page 40A daily journal at the intersection of AI and cybersecurity. Tuesday, May 19, 2026 New Shai-Hulud Wave Compromises 600+ npm Packages in Fresh Supply Chain Hit supply-chain · npm · malware ScadaBR 1.2.0 Hit by Four CVEs Including Unauthenticated RCE (CVSS 9.1) vulnerability · cve · rce · ics Drupal Warns of Critical Core Patch on May 20 — Exploits Expected Within Hours vulnerability · cve · appsec Critical SEPPMail Gateway Vulnerabilities Enable RCE and Full Mail Traffic Read vulnerability · rce · appsec Critical SEPPMail Secure E-Mail Gateway Flaws Enable RCE and Full Mail Traffic Interception rce · vulnerability · cve · appsec Compromised Nx Console VS Code Extension Installed Credential Stealer on 2.2M Developer Machines supply-chain · credential-stealer · malware · github Compromised Nx Console 18.95.0 Delivers Credential Stealer to 2.2M VS Code Users supply-chain · npm · credential-theft · appsec · devsecops Monday, May 18, 2026 GitHub Actions Supply Chain Attack Hijacks actions-cool/issues-helper Tags supply-chain · github · credential-theft · devsecops ← Newer Page 40 of 65 Older →
New Shai-Hulud Wave Compromises 600+ npm Packages in Fresh Supply Chain Hit supply-chain · npm · malware
ScadaBR 1.2.0 Hit by Four CVEs Including Unauthenticated RCE (CVSS 9.1) vulnerability · cve · rce · ics
Drupal Warns of Critical Core Patch on May 20 — Exploits Expected Within Hours vulnerability · cve · appsec
Critical SEPPMail Gateway Vulnerabilities Enable RCE and Full Mail Traffic Read vulnerability · rce · appsec
Critical SEPPMail Secure E-Mail Gateway Flaws Enable RCE and Full Mail Traffic Interception rce · vulnerability · cve · appsec
Compromised Nx Console VS Code Extension Installed Credential Stealer on 2.2M Developer Machines supply-chain · credential-stealer · malware · github
Compromised Nx Console 18.95.0 Delivers Credential Stealer to 2.2M VS Code Users supply-chain · npm · credential-theft · appsec · devsecops
GitHub Actions Supply Chain Attack Hijacks actions-cool/issues-helper Tags supply-chain · github · credential-theft · devsecops