Weekly Threat Intelligence: May 25 to May 31, 2026

## Executive summary This weekly briefing reports a dramatic increase in software supply-chain attacks and active exploitation of multiple critical vulnerabilities (including CVSS 10.0 sandbox escapes, Netlogon stack overflow, and compromised npm packages), urging immediate patching, dependency integrity checks, credential rotation, and migration away from vulnerable JavaScript sandboxes.