Critical Vulnerabilities and Supply Chain Attacks Highlight Cybersecurity Risks – May 2026 Update

The LiteSpeed cPanel plugin has a critical vulnerability CVE-2026-48172 (CVSS 10.0) actively exploited in the wild, enabling attackers to execute scripts with root privileges due to privilege misassignment. This severe security flaw poses a major threat to affected systems as of May 2026.

npm introduced staged publishing and two-factor authentication (2FA) controls for package releases to combat supply chain attacks. These new features, generally available since May 2026, allow maintainers to approve package releases before they become public, enhancing software supply chain security.

Global law enforcement agencies dismantled the 'First VPN' cybercriminal network linked to ransomware syndicates worldwide in May 2026. This coordinated international crackdown targeted a major platform used by cybercriminals to anonymize operations and distribute ransomware.

Anthropic's Claude Mythos AI identified over 10,000 high-severity vulnerabilities in widely used software since its launch just last month in April 2026. This discovery underscores a mounting cybersecurity risk and highlights the growing role of AI in vulnerability detection.

Cybersecurity researchers uncovered a supply chain attack compromising Laravel-Lang PHP packages, including laravel-lang/lang. The malicious updates aimed to steal user credentials by injecting cross-platform credential stealing malware in May 2026.

CISA added Drupal Core's SQL injection vulnerability CVE-2026-9082, with a CVSS score of 6.5, to its Known Exploited Vulnerabilities list following active exploitation reports. This move in May 2026 highlights the urgency for patching this critical web content management flaw.

UpGuard's ASX 200 Cybersecurity Report revealed that 10% of ASX 200 companies are infected by dark web infostealers as of May 2026. This significant statistic emphasizes widespread corporate vulnerability to cyber espionage and data theft.

A supply chain attack infected eight Packagist PHP packages with Linux malware delivered via GitHub Releases, undetected through composer.json modifications. Discovered in May 2026, this attack demonstrates sophisticated methods to evade traditional detection.

Cohesity partnered with the Cybersecurity and Infrastructure Security Agency (CISA) in May 2026 to enhance cybersecurity information sharing and incident response capabilities. This public-private collaboration aims to improve defense against evolving cyber threats.

A significant data breach at GitHub underscored increasing cybersecurity risks related to employee vulnerabilities and insider threats by May 2026. This incident highlights the critical need for robust internal security controls and employee awareness.