Daily Reading for 2026-05-20
Daily Reading for 2026-05-20
Security
Security Risk Advisors
- Navigating the npm Attack Surface: Defending Against Open-Source Supply Chain Compromises
- 🚩 Chinese-speaking cybercrime groups use BadIIS malware-as-a-service ecosystem to hijack IIS servers for SEO fraud and traffic manipulation
- 🚩 Critical “NGINX Rift” vulnerability enables unauthenticated DoS and potential RCE through rewrite module misconfiguration
- 🚩 HUMAN Security identifies Trapdoor, a self-sustaining Android ad fraud and malvertising operation spanning 455 malicious apps and 183 C2 domains