Daily News - May 15th

This Daily Intel briefing, dated May 15, 2026, provides essential cybersecurity updates for small-business leaders, cyber professionals, MSPs, CISOs, GovCon leaders, and security operators. We cover critical active threats and significant advancements in AI for security.Key risks discussed include a high-severity Microsoft Exchange Server zero-day vulnerability actively exploited via Outlook on the web, demanding immediate mitigation. We also highlight the supply chain risks in AI development, exemplified by the TeamPCP hacker group threatening to leak Mistral AI's source code. A newly reported macOS kernel memory corruption vulnerability on Apple M5 chips introduces a new attack vector, urging caution with unverified software. Open-source projects like GlycemicGPT and SigNoz also warrant careful review for sensitive data handling.The briefing also explores promising developments in AI and security automation. Microsoft Defender is rolling out an AI-powered Security Alert Triage Agent to boost analyst productivity, and Cloudflare's Email Service is in public beta for AI agents. Google Cloud Tech details patterns for giving AI agents memory, moving towards more actionable AI systems.Practical takeaways include prioritizing patching and mitigation for the Microsoft Exchange zero-day, thoroughly reviewing exposure for open-source projects or macOS M5 devices, and evaluating AI-powered tools like Microsoft's triage agent or Cloudflare's agent email service to enhance automation.