Daily Signal - page 44A daily journal at the intersection of AI and cybersecurity. Tuesday, May 19, 2026 Critical SEPPMail Secure E-Mail Gateway Flaws Enable RCE and Full Mail Traffic Interception rce · vulnerability · cve · appsec Compromised Nx Console VS Code Extension Installed Credential Stealer on 2.2M Developer Machines supply-chain · credential-stealer · malware · github Compromised Nx Console 18.95.0 Delivers Credential Stealer to 2.2M VS Code Users supply-chain · npm · credential-theft · appsec · devsecops Monday, May 18, 2026 GitHub Actions Supply Chain Attack Hijacks actions-cool/issues-helper Tags supply-chain · github · credential-theft · devsecops GitHub Actions Supply Chain Attack Redirects All Tags to Credential-Stealing Commit supply-chain · github · ci-cd · malware · credential-stealer Mini Shai-Hulud Campaign Poisons AntV npm Packages via Compromised Maintainer Account supply-chain · npm · malware · credential-stealer Microsoft Exchange Zero-Day Under Active Attack, No Patch Available zero-day · microsoft · xss · vulnerability · cve CISA Contractor Exposed AWS GovCloud Keys and Internal System Details on Public GitHub data-breach · aws · iam · github · cloud-security ← Newer Page 44 of 68 Older →
Critical SEPPMail Secure E-Mail Gateway Flaws Enable RCE and Full Mail Traffic Interception rce · vulnerability · cve · appsec
Compromised Nx Console VS Code Extension Installed Credential Stealer on 2.2M Developer Machines supply-chain · credential-stealer · malware · github
Compromised Nx Console 18.95.0 Delivers Credential Stealer to 2.2M VS Code Users supply-chain · npm · credential-theft · appsec · devsecops
GitHub Actions Supply Chain Attack Hijacks actions-cool/issues-helper Tags supply-chain · github · credential-theft · devsecops
GitHub Actions Supply Chain Attack Redirects All Tags to Credential-Stealing Commit supply-chain · github · ci-cd · malware · credential-stealer
Mini Shai-Hulud Campaign Poisons AntV npm Packages via Compromised Maintainer Account supply-chain · npm · malware · credential-stealer
Microsoft Exchange Zero-Day Under Active Attack, No Patch Available zero-day · microsoft · xss · vulnerability · cve
CISA Contractor Exposed AWS GovCloud Keys and Internal System Details on Public GitHub data-breach · aws · iam · github · cloud-security