ISC Stormcast For Wednesday, May 20th, 2026 https://isc.sans.edu/podcastdetail/9938, (Wed, May 20th)

SANS ISC diary feed (mid-May 2026) covering multiple security topics. Key item: TeamPCP supply-chain campaign escalation — an officially confirmed compromise of a Checkmarx Jenkins plugin and the emergence of a self‑spreading “Mini Shai‑Hulud” worm propagating via npm and PyPI (noted alongside the March Trivy disclosure). Other entries discuss new malware libraries (requiring signature updates), a simple bypass of Outlook’s link‑preview in the Junk folder that can expose link destinations, an analysis of website fraud techniques, and techniques for proxying EXE traffic to otherwise “unproxy­-y