Please consider supporting the DefSec podcast here.

Links to this week’s stories:

• https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html
• https://www.tenable.com/blog/key-findings-from-the-verizon-dbir-2026
• https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
• https://www.bleepingcomputer.com/news/security/grafana-breach-caused-by-missed-token-rotation-after-tanstack-attack/
• https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
• https://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.html