Cybersecurity News: AI Attacks, Botnet Takedown & Critical Vulnerabilities - May 29, 2026

Key points

• •On May 29, 2026, critical security vulnerabilities were discovered in widely used software such as Notepad++, potentially allowing remote code execution and affecting countless users globally. This highlights ongoing risks in popular applications requiring immediate patching to prevent exploitation.[CyberSecurityNews]
• •A significant multinational law enforcement effort successfully dismantled a vast botnet comprising 17 million compromised devices, emphasizing strengthened global collaboration against cybercrime infrastructure. This large-scale takedown disrupts a major part of the cyberattack ecosystem.[Interesting Engineering]
• •The FBI issued multiple alerts in late May 2026 concerning impersonation attacks on healthcare IT personnel and a phishing campaign named Kali365 that targets Microsoft accounts, warning organizations to be vigilant against sophisticated social engineering and credential theft tactics.[American Hospital Association][Cybersecurity Insiders][American Hospital Association]
• •Emerging AI-powered cyber threats are gaining prominence, as evidenced by GREYVIBE's AI-driven attacks on Ukraine since August 2025 and the use of AI agents for post-exploitation following the Marimo CVE-2026-39987 vulnerability. These developments indicate a new era in cyberattack complexity involving artificial intelligence augmentation.[The Hacker News RSS][The Hacker News RSS]
• •Concerns about software supply chain security led CISA to issue advisories urging security teams to audit development processes rigorously, aiming to prevent compromises that could propagate widely harmful malware or backdoors through legitimate software channels.[Cybersecurity Dive][Cybersecurity Dive]
• •Researchers uncovered a malicious NuGet package disguised as a financial SDK that steals sensitive banking credentials and certificate files, specifically threatening Brazilian financial institutions and cloud environments, illustrating growing malware sophistication targeting cloud and financial sectors.[The Hacker News RSS]
• •North Korean threat actor Kimsuky expanded its cyberattack toolkit in early 2026 by deploying tools such as HTTPSpy, HelloDoor, and VS Code tunnels to penetrate South Korean military and corporate infrastructures, indicating increased operational capabilities within state-sponsored cyber espionage.[The Hacker News RSS]
• •A novel phishing vulnerability dubbed ChatGPhish was identified in OpenAI’s ChatGPT, exploiting Markdown features to conduct prompt injection attacks that facilitate phishing. This vulnerability underscores AI's dual role as both a tool for innovation and a new attack surface demanding urgent cybersecurity focus.[The Hacker News RSS]
• •Investor confidence in cybersecurity technologies remains strong, with major funding rounds including an £11 million investment led by Google Ventures into a UK cybersecurity firm and a $15 million raise by emerging startup MokN, highlighting the sector’s growth amidst evolving cyber threats.[UKTN][UKTN][Axios]
• •Cybersecurity threats continue to disproportionately impact critical sectors such as healthcare and finance, with FBI warnings and exposed vulnerabilities emphasizing the need for improved defensive measures and threat intelligence sharing to protect sensitive data and infrastructure.[American Hospital Association][The Hacker News RSS][Barracuda Networks Blog]

Relevant articles