In Other News: Train Hacker Arrested, PamDOORa Linux Backdoor, New CISA Director Frontrunner

2026-05-08T19:24:06Z1f107bdf02b909f55a0dce910508c94fb35815cec9076d2fbcd3a7c22e8d7ff6
72-hour-patch-cycleapi-key-compromiseaws-account-compromisebraintrustbrowser-extensioncanvas-outagecisa-directorclaude-extension-vulnerabilitycloud-environmentseurasian-drone-espionageics-breachivantilinux-backdoorotp-theftpalo-alto-zero-daypamdoorapcpjackransomhousestate-linked-espionageteampcptrain-hackertrellix-breachwater-treatmentweb-application-wormwindows-phone-link

What happened

SecurityWeek roundup: multiple incidents and vulnerabilities including ICS breaches at five Polish water treatment plants that allowed attackers to modify equipment parameters (direct public-safety risk); PamDOORa Linux backdoor; arrest of a train hacker; contender for new CISA director; US push for 72-hour patch cycles; malware abusing Windows Phone Link to steal OTPs; a spy campaign targeting the Eurasian drone industry; AI firm Braintrust breach prompting API key rotation after an AWS account compromise; Canvas outage from a cyberattack affecting schools; the PCPJack worm targeting web apps

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityweek
Record identifier
1f107bdf02b909f55a0dce910508c94fb35815cec9076d2fbcd3a7c22e8d7ff6
Enrichment time
2026-05-08T19:24:06Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.