Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
TheHackersNews, Monday, May 25th, 2026
Weekly cybersecurity recap covering GitHub breach via poisoned VS Code extension, Linux kernel vulnerability, and Microsoft Defender zero-days.
This weekly cybersecurity recap highlights major threats including GitHub's breach through a compromised Nx Console VS Code extension linked to the TanStack supply chain attack, a 9-year-old Linux kernel vulnerability enabling root command execution, and two actively exploited Microsoft Defender zero-days.
Additional significant incidents covered include Microsoft's takedown of Fox Tempest ransomware group, a critical Drupal SQL injection flaw under active attack, and Anthropic's discovery of over 10,000 high-severity vulnerabilities in popular open-source software.
The recap emphasizes the growing sophistication of supply chain attacks and the shrinking window between patch releases and exploit deployment.