ISC Stormcast For Tuesday, May 19th, 2026 https://isc.sans.edu/podcastdetail/9936, (Tue, May 19th)
2026-05-20T01:23:46Z•9bfe8cfdd6ea5644c3a24e913d3eaa3e424a9830394245fe557b29da34946abd
CheckmarxChromiumEdgeJenkins plugin compromiseMicrosoft Patch TuesdayMini Shai-HuludOutlookPyPITeamPCPlink preview bypassmalware librariesnpmproxying EXE trafficsignaturessupply chainthreat intelvulnerabilitieswebsite fraudworm
What happened
SANS ISC diary roundup (mid-May 2026). Highlights include an active TeamPCP supply‑chain campaign with an officially confirmed compromise of a Checkmarx Jenkins plugin and a new self‑spreading “Mini Shai‑Hulud” worm affecting both npm and PyPI packages. Microsoft’s May 2026 Patch Tuesday addressed 137 vulnerabilities (including 137 Chromium issues impacting Edge). Other posts cover malicious‑email detection (Outlook Junk link‑preview bypass), emergence of new malware libraries requiring updated signatures, website fraud analysis, techniques for proxying EXE traffic through proxies, and regular
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 9bfe8cfdd6ea5644c3a24e913d3eaa3e424a9830394245fe557b29da34946abd
- Enrichment time
- 2026-05-20T01:23:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.