5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

Multiple active and emerging threats were reported: leaked Shai-Hulud malware is fueling a new npm infostealer campaign and the popular node-ipc package was also compromised to steal credentials, representing ongoing supply-chain risk. WordPress plugins (Funnel Builder and Avada Builder) have critical flaws being actively exploited to steal payment and site credentials. Multiple privilege-escalation flaws have public exploits or PoCs — a Linux DirtyDecrypt LPE exploit and a Windows MiniPlasma zero-day PoC that yields SYSTEM — while Pwn2Own Berlin 2026 disclosed dozens of additional zero-days.