Daily Reading for 2026-05-23
Daily Reading for 2026-05-23
Security
Security Risk Advisors
- Mini Shai-Hulud supply chain worm compromises hundreds of npm packages and forges valid Sigstore provenance to evade trust controls.
- 🚩 China-aligned Webworm expands espionage operations with Discord and Microsoft Graph API malware plus stealth proxy infrastructure.
- 🚩 North Korean-linked npm malware targets developers with Telegram theft, SSH key harvesting, and full remote access capabilities.
Microsoft Security Blog
- Microsoft recognized as a Leader in The Forrester Waveâ„¢ for Workforce Identity Security Platforms
- From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
- Microsoft Security success stories: How St. Luke’s and ManpowerGroup are securing AI foundations