Daily News - May 19th

This Daily Intel podcast episode from May 19, 2026, delivers critical cybersecurity updates for small-business leaders, cyber professionals, MSPs, CISOs, GovCon leaders, and security operators.Today's briefing highlights significant risks, starting with a major CISA contractor data leak exposing AWS GovCloud credentials and internal system details on GitHub. This incident, alongside a breach of Grafana Labs' GitHub environment, underscores the urgent need to secure development environments and code repositories. We also cover a new, unpatched Microsoft Exchange zero-day (CVE-2026-42897) actively under attack, posing a serious threat to Outlook Web Access mailboxes. Further supply chain risks are evident with the Shai-Hulud malware now infecting Node Package Manager indexes.On a positive note, INTERPOL's 'Operation Ramz' led to over 200 cybercrime arrests and the seizure of numerous malware servers. We then shift to the evolving landscape of AI and security automation, discussing Google Cloud's advancements in Cloud AI, Gemini, and agentic workflows, along with Cloudflare's new Email Service for agents. Practical applications are showcased with John Hammond's AI Cybersecurity Research Factory.Key takeaways for today include rigorously reviewing and securing all credentials and code repositories, prioritizing patching and vulnerability management (especially for unpatched zero-days), and evaluating emerging AI tools for enhanced security operations