Security briefing: May 2026

This monthly security briefing documents major breaches and vulnerabilities from May 2026, including the Canvas ransomware incident affecting 275 million users, a GitHub compromise via a backdoored VS Code extension, and exposed AWS credentials at CISA. The report emphasizes that threat actors are using automation, AI, and cloud-native infrastructure to move faster while many incidents remain preventable through better credential management and security controls.