Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures
2026-06-03T19:24:03Z•80a08a5e473d9718325f15712868edf543eb69b6fe47707eb8d5d05aceed2289
active-exploitationai-securitydata-breachexploit-leakincident-responsenpm-malwareprompt-injectionransomwareremote-code-executionsupply-chainthreat-actorsvulnerability-disclosurezero-day
What happened
Roundup of The Register security reporting (late May–early June 2026): a contentious disclosure environment saw a bug hunter publicly leaking Microsoft 0‑day exploits amid a feud with Redmond, and multiple actively exploited vulnerabilities (notably a Palo Alto PAN‑OS VPN authentication bypass and a critical RCE in Gogs with an exploit module available). Supply‑chain and package ecosystem attacks featured prominently — malicious npm packages impersonating OpenSearch/Elasticsearch libraries and Shai‑Hulud malware infecting Red Hat npm packages — alongside large data breaches (ShinyHunters hits,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 80a08a5e473d9718325f15712868edf543eb69b6fe47707eb8d5d05aceed2289
- Enrichment time
- 2026-06-03T19:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.