Cybersecurity News | Daily Recap [22 May 2026]

Vulnerabilities

• Drupal, Ubiquiti, Cisco, Microsoft, and TrendAI shipped urgent fixes for actively exploited or CVSS 10.0 flaws, including a Drupal SQLi, three max-severity UniFi OS bugs, a Secure Workload API issue, two Defender vulnerabilities, and an in-the-wild Apex One zero-day – Drupal SQLi, UniFi OS Flaws, Cisco API Bug, Defender Bugs, Apex Zero-Day
• Google accidentally exposed details of an unfixed Chromium flaw, while CISA said it will let researchers report issues tied to the KEV catalog to speed remediation – Chromium Leak, CISA KEV

Botnets & Malware

• Canada arrested the alleged operator of the Kimwolf botnet, with US and Canada also charging him in a coordinated action against the malware network – Kimwolf Arrest, Kimwolf Charges, Botnet Admin
• Showboat Linux malware was used against Middle East telecoms to deploy a SOCKS5 proxy backdoor, as broader reporting highlighted ongoing Linux rootkits, router 0-days, and AI-driven intrusions – Showboat Malware, ThreatsDay Bulletin
• Researchers detailed how BYOVD techniques can turn vulnerable drivers into practical exploit chains without special hardware, expanding attacker options for stealth and persistence – BYOVD

Supply Chain & DevOps

• Grafana said its codebase and other data were stolen in a TanStack supply-chain attack, highlighting how malicious dependencies can expose developer assets – Grafana Leak
• Megalodon targeted 5,561 GitHub repositories with malicious CI/CD workflows, showing how attackers are abusing automation pipelines to spread compromise at scale – Megalodon Attack

Cybercrime & Fraud

• Europe authorities dismantled the First VPN cybercrime service and arrested its administrator, disrupting a platform used to support criminal activity and hide traffic – First VPN, VPN Arrest
• Two Americans pleaded guilty to helping India-based tech-support scam centers, underscoring the cross-border infrastructure behind large-scale fraud operations – Scam Guilty
• Apple said it blocked over $11 billion in App Store fraud over 6 years, reinforcing the scale of payment abuse and fraudulent app activity – Apple Fraud
• A separate piece examined why chargebacks are only one part of the broader fraud problem facing merchants and platforms – Fraud Puzzle

Policy & Regulation

• Tech giants told the UK regulator Ofcom they will modify platforms to better protect children online, while Trump postponed an executive order focused on AI security – Child Safety, AI Order
• Lawmakers from both parties said CISA budget cuts have gone too far, as the agency’s chief warned that open-source vulnerabilities and delayed security upgrades remain major risks – CISA Cuts, Open-Source Risk

Cybersecurity News | Daily Recap – hendryadrian.com