Daily News - May 26th

Today's critical risks include an urgent CISA directive to patch an actively exploited SQL injection vulnerability in Drupal, demanding immediate attention from any organization running the platform. We also cover the ShinyHunters extortion gang's breach of 7-Eleven, exposing personal data for over 183,000 individuals, underscoring persistent data breach risks for even large enterprises. A significant theme is the sophisticated TeamPCP supply chain campaign, now active across three package ecosystems, impacting GitHub and trojanizing an official Microsoft Python SDK—a stark reminder of the need for extreme vigilance in managing software dependencies.Practical takeaways include immediately patching all Drupal instances and thoroughly reviewing your software supply chain. We also explore the rapid advancements in AI, with Google Cloud Tech showcasing enterprise-grade AI agents and next-gen architectures, and Cloudflare's Email Service entering public beta for agents, hinting at streamlined automated threat intelligence. These developments highlight AI's growing role in cybersecurity operations. Finally, we recommend understanding incident response before a breach occurs by considering events like Dark Reading's "Anatomy of a Data Breach."