Archive snapshot

Sat, May 23 · 12:00 PM CDT

Archived briefing content rendered inside the ACSP site experience.

Back to archive

Archived briefing

Snapshot overview

Generated Sat, May 23 · 12:00 PM CDTWindow last 6 hours

Top line

Coverage now updates on a rolling 6-hour window, while NVD entries come from the live API using a last-24-hours modified window and are sorted by severity.

Fast take

News stays on the current 6-hour slice, videos now use the last 24 hours, and NVD uses the API instead of the traditional feed to better match the live site behavior.

Top stories
5
Worth skimming
5
Tracked videos
0
NVD vulnerabilities
25

Top stories

Sat, 23 May 2026 22:05:10 +0530

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

9.8/10 · Must read/watch
The Hacker Newssupply-chainai

Summary
GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages becoming publicly available for installation. Called staged publishing, the fe

Open article ↗
Sat, 23 May 2026 21:37:51 +0530

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

9.8/10 · Must read/watch
The Hacker Newsmalwaresupply-chainai

Summary
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. "Although the affected packages were all Composer packages, the malicious co

Open article ↗
Sat, 23 May 2026 17:25:35 +0530

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

8.6/10 · Worth your time
The Hacker Newsai

Summary
Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most "systemically" important software across the world since the cybersecurity initiative went live last mon

Open article ↗
Sat, May 23 · 12:00 PM CDT

Grafana Labs Says Code Breach Stemmed from TanStack Attack

8.1/10 · Worth your time
Infosecurity Magazinegeneral

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗
Sat, May 23 · 11:03 AM CDT

Italy Cancels Boeing Pegasus Order, Shifting to Airbus A330 MRTT

8.1/10 · Worth your time
Hacker Newsai

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 57 minutes ago.

Open article ↗

Worth skimming

Sat, May 23 · 11:00 AM CDT

AI Engineering from Scratch

8.1/10 · Worth your time
Hacker Newsai

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 1 hour ago.

Open article ↗
Sat, May 23 · 12:00 PM CDT

Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning

8.0/10 · Worth your time
Infosecurity Magazinemalwareai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗
Sat, May 23 · 12:00 PM CDT

GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

8.0/10 · Worth your time
Infosecurity Magazinesupply-chain

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗
Sat, May 23 · 12:00 PM CDT

Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users

8.0/10 · Worth your time
Infosecurity Magazinemalwareai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗
Sat, May 23 · 12:00 PM CDT

Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem

8.0/10 · Worth your time
Infosecurity Magazinesupply-chainai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗