This edition tracks the week’s highest-impact cybersecurity and AI-security developments, selected for relevance to security, technology, and communications leaders.
This issue highlights a massive supply chain attack on GitHub affecting over 5,500 repositories, the active exploitation of a critical Ghost CMS vulnerability, and a significant data exposure at Trump Mobile.
Sources
- [Trump Mobile confirms it exposed customers' personal data, including phone numbers and home addresses](https://techcrunch.com/2026/05/22/trump-mobile-confirms-it-exposed-customers-personal-data-including-phone-numbers-and-home-addresses)
- [Over 5,500 GitHub Repositories Infected in 'Megalodon' Supply Chain Attack](https://www.securityweek.com/over-5500-github-repositories-infected-in-megalodon-supply-chain-attack)
- [Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks](https://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.html)
