Dexcom Warns Stolen G7 Glucose Sensors May Pose Infection, Reading Risks

A roundup of mid‑May 2026 security incidents: multiple large data breaches and extortion campaigns tied to social‑engineering and vishing (Carnival ~6M customers, Charter/ShinyHunters ~42M, 7‑Eleven reports, OnlyFans listing) and ongoing activity by ShinyHunters. FBI warnings highlight Kali365 (phishing service that abuses device‑code/OAuth flows) and Silent Ransom Group’s physical impersonation tactics. Microsoft disclosed a Windows zero‑day dubbed “YellowKey” able to bypass BitLocker (temporary mitigations issued). Microsoft also disrupted Fox Tempest, a malware‑signing service abusing Azure