Google publishes exploit code threatening millions of Chromium users

May 2026 security roundup: multiple high-impact incidents and active exploits were reported — Google published exploit code targeting millions of Chromium users (reported 29 months earlier), an active zero‑day fully defeats default Windows 11 BitLocker protections, and Linux suffered consecutive severe vulnerabilities (including CopyFail) with production patches rolling out. A month‑long supply‑chain backdoor hit Daemon Tools, an npm package (element-data) was exfiltrating credentials, and Microsoft pushed emergency ASP.NET updates for macOS/Linux; Ubuntu infrastructure outages impeded timely,