Daily Threat Briefing – May 12, 2026

This briefing reports multiple simultaneous critical threats: a compromised Checkmarx Jenkins plugin distributing an infostealer, the first reported AI-generated zero-day 2FA bypass observed in the wild, active exploitation of cPanel CVE-2026-41940 to install persistent backdoors, a Canvas platform extortion campaign impacting educational institutions, and a Linux kernel privilege escalation (Dirty Frag). It urges immediate patching, credential rotation, forensic investigation, and strengthened authentication and monitoring across affected environments.