Two US Men Jailed for Helping North Korean Hackers Infiltrate US Firms

This feed aggregates multiple high-impact security incidents and research from May 2026: a DigiCert support-chat compromise led to issuance (and subsequent revocation) of ~60 code‑signing certificates used to sign Zhong Stealer; the JDownloader official site was hijacked to serve malicious installers; a malvertising campaign used a fake Claude AI site to deploy a new Beagle backdoor; the ClaudeBleed flaw lets attackers bypass the Claude Chrome extension guardrails to exfiltrate Google Drive/Gmail data; ClickFix campaigns targeted macOS users to steal iCloud credentials (AMOS and SHub Stealer);