Daily Threat Briefing — May 25, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of May 25, 2026.

1. Wireshark 4.6.6 Released, (Sun, May 24th)
   — SANS ISC
   
   Wireshark release 4.6.6 fixes 1 vulnerability and 11 bugs.
2. Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
   — Bleeping Computer
   
   A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript cod…
3. Laravel Lang packages hijacked to deploy credential-stealing malware
   — Bleeping Computer
   
   A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware…
4. npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
   — The Hacker News
   
   GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitl…
5. Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
   — The Hacker News
   
   A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux b…
6. Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes
   — Bleeping Computer
   
   Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platform…
7. Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software
   — The Hacker News
   
   Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across s…
8. An Example of Stack String in High Level Language, (Sat, May 23rd)
   — SANS ISC
   
   This week, I&#x27m attending the SEC670[1] training (“Red Teaming Tools – Developing Windows Implants, Shellcode, Command and C…
9. Lawmakers Demand Answers as CISA Tries to Contain Data Leak
   — Krebs on Security
   
   Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOn…
10. Akamai Joins Growing Chorus of Vendors Betting Big on Secure Enterprise Browsers
    — Dark Reading
    
    When Akamai announced its LayerX acquisition, the company joined a growing list of vendors adding secure enterprise browsers to their produc…
11. Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks
    — Dark Reading
    
    Ransomware and vendor breaches persist. The "2026 Data Breach Investigations Report" (DBIR) highlights how evolving social engineering tacti…
12. Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
    — Unit 42
    
    Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in recent campa…

Generated by CryptXNet.ai Threat Intelligence Platform · May 25, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com