ISC Stormcast For Thursday, May 21st, 2026 https://isc.sans.edu/podcastdetail/9940, (Thu, May 21st)
2026-05-21T13:23:47Z•7f1f0034e48e17d5b055694f15135e21f4f6d8f1eeb115144a67e86931559d78
checkmarxjenkins-plugin-compromiselink-preview-bypassmalware-librariesmini-shai-huludnpmoutlookphishingpypisans-iscstormcastsupply-chainteampcpweb-fraudworm
What happened
ISC SANS diary RSS (May 13–21, 2026) listing daily Stormcast posts and multiple security updates. Key items: a TeamPCP supply‑chain campaign update reporting an officially confirmed Checkmarx Jenkins plugin compromise and a new self‑spreading "Mini Shai‑Hulud" worm propagating via npm and PyPI; analysis of Outlook Junk‑folder link preview behavior enabling hidden/obfuscated malicious links; note on new malware libraries requiring updated signatures; and a guest analysis of website fraud techniques.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 7f1f0034e48e17d5b055694f15135e21f4f6d8f1eeb115144a67e86931559d78
- Enrichment time
- 2026-05-21T13:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.