Cybersecurity News | Daily Recap [19 May 2026]

AI & Governance

• Security experts say AI Bills of Materials may become practical by 2026 as firms weigh transparency, governance, and risk control for AI systems – AI BOMs
• Privacy advocates warn that letting AI firms connect to financial accounts could create new data exposure and cyber-risk tradeoffs, while another piece argues AI may reduce false positives but won’t eliminate reporting noise – AI Finance, AI Noise
• Guidance on controlling shadow AI highlights how organizations can manage unsanctioned tools without slowing employees – Shadow AI

Supply Chain & Dev

• A compromised Nx Console 18.95.0 add-on targeted VS Code developers with a credential stealer, underscoring growing developer-side supply chain abuse – Nx Console
• Malicious AntV npm packages were pushed through a compromised maintainer account in a Mini Shai-Hulud campaign, while leaked Shai-Hulud code fueled a new npm infostealer wave – Mini Shai-Hulud, Shai-Hulud
• A GitHub Actions supply chain attack reportedly redirected tags to steal CI/CD credentials, reinforcing the risk of build-system compromise – GH Actions
• A weekly roundup covered an Exchange 0-day, npm worm, fake AI repo, and Cisco exploit among other active threats – Weekly Recap
• Analysts note developer workstations are now a core part of the software supply chain and should be treated as production assets – Dev Workstations

Malware & Phishing

• Attackers are abusing the legacy Windows tool MSHTA to drive a surge in quiet malware infections and evade detection – MSHTA Abuse
• A new SHub macOS infostealer variant spoofs Apple security updates to trick users into installing malware – SHub Mac
• Tips for reducing phishing exposure stress layered defenses before scams turn into business disruption – Phishing Defense

Vulnerabilities & Patching

• An unpatched ChromaDB flaw can lead to server takeover, adding pressure to secure AI-adjacent infrastructure – ChromaDB Flaw
• A critical vulnerability exposes industrial robot fleets to hacking, raising safety and operational concerns for automation environments – Robot Fleets
• Microsoft confirmed patching issues in restricted Windows networks, potentially delaying remediation in tightly controlled environments – Windows Patching

Cybercrime & Law Enforcement

• B1ack’s Stash reportedly gave away 4.6 million stolen credit cards, highlighting the scale of underground carding operations – B1ack’s Stash
• INTERPOL’s Operation Ramz seized 53 malware and phishing servers and led to 201 arrests across 13 countries in the Middle East and North Africa – Ramz Seizure, Ramz Arrests, Middle East Raids, Ramz Crackdown
• Grafana refused to pay a ransom after its codebase was stolen, reflecting a hardline stance against extortion demands – Grafana Theft

Cybersecurity News | Daily Recap – hendryadrian.com