To gain root access at this company, all an intruder had to do was ask nicely

A roundup of mid‑May 2026 security news: a successful social‑engineering campaign let an intruder obtain root by manipulating IT staff; multiple publicly disclosed Linux kernel/userland flaws (CopyFail, Dirty Frag) with reliable root exploits and limited/no patches; active exploitation and widespread ransomware/data‑theft incidents (Foxconn, ShinyHunters, TeamPCP); a high‑volume Patch Tuesday from Microsoft (30 critical CVEs); a fast supply‑chain compromise of TanStack npm packages pushing credential‑theft and wiper payloads; malware authors open‑sourcing a worm (Shai‑Hulud); credential thefts