Security Signals (4/21/26-5/5/26)

**Executive summary:** This intelligence roundup (April–May 2026) compiles numerous active and high-impact cybersecurity items, including APT campaigns (e.g., Tropic Trooper, Lazarus subgroups, Mustang Panda), zero-day and CVE exploitation (DragonBreath BYOVD, CVE-2026-33626), supply-chain and npm compromises, widespread ransomware activity (Kyber, The Gentlemen, Qilin affiliates), infostealers and banking malware, and diverse phishing/AiTM and credential-theft campaigns, indicating broad, ongoing threats to enterprises, financial and Web3 sectors across multiple regions.