Skip to content
Play
CISO
War Room
Labs
New
Explore
Pricing
About
Individuals
Teams
All posts
Topic
May 2026
1 article on may 2026.
May 2026 Cyber Attacks and Data Breaches: A Roundup With a Severity Read
An independent, attributed roundup of the major cybersecurity incidents of May 2026 — from the ShinyHunters Canvas/Instructure extortion and the TanStack supply-chain worm that reached OpenAI to the DigiCert code-signing abuse, a suspected Iranian attack on US gas-station tank gauges, and breaches at Carnival, Charter/Spectrum, West Pharmaceutical and more. Each item carries a verification status (confirmed, claimed or reported) and a clearly-labelled subjective editorial severity, with a defensive takeaway.
May 31, 2026
🎉 New here? Use code
WELCOME10
for
10% off
any plan at checkout
LAB
New: 9 free hands-on security labs — firewall, DMARC, cloud, detection, forensics
NEWS
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
LAB
Tune SPF/DKIM/DMARC and watch spoofs bounce — free Email Auth Lab
BLOG
September 2026 Cyber Attacks and Data Breaches: A Roundup With a Severity Read
LAB
Catch the attack with zero false positives — free Detection Lab
NEWS
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
PLAY
Run a live CISO War Room incident simulation
PLAY
Practice a board report and get it AI-graded
BLOG
August 2026 Cyber Attacks and Data Breaches: A Roundup With a Severity Read
PLAY
Live AI mock interview for security leaders
NEWS
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
FREE
2-minute CISO Readiness Scorecard — find your weakest area
BLOG
July 2026 Cyber Attacks and Data Breaches: A Roundup With a Severity Read
TOOLS
120+ interactive security architecture diagrams
TOOLS
Generate and validate an AI Bill of Materials (AIBOM)
NEW
See everything PlayCISO has shipped
LAB
New: 9 free hands-on security labs — firewall, DMARC, cloud, detection, forensics
NEWS
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
LAB
Tune SPF/DKIM/DMARC and watch spoofs bounce — free Email Auth Lab
BLOG
September 2026 Cyber Attacks and Data Breaches: A Roundup With a Severity Read
LAB
Catch the attack with zero false positives — free Detection Lab
NEWS
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
PLAY
Run a live CISO War Room incident simulation
PLAY
Practice a board report and get it AI-graded
BLOG
August 2026 Cyber Attacks and Data Breaches: A Roundup With a Severity Read
PLAY
Live AI mock interview for security leaders
NEWS
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
FREE
2-minute CISO Readiness Scorecard — find your weakest area
BLOG
July 2026 Cyber Attacks and Data Breaches: A Roundup With a Severity Read
TOOLS
120+ interactive security architecture diagrams
TOOLS
Generate and validate an AI Bill of Materials (AIBOM)
NEW
See everything PlayCISO has shipped
✕
Explore PlayCISO
Guides & Hubs
All Guides & How-Tos
New
Consultancy Breach Index
New
Cryptography & PKI
New
OT / ICS Security
New
AI & LLM Security
New
PCI DSS & Compliance
New
Breach Cost Index
New
Security Budget Benchmark
New
30 Real-World AI Risks
New
ICS/OT Advisories Dataset
New
Best Free Security Tools
New
Free Security Training
New
Best Free Threat Modeling
New
Free AI Security Tools
New
Practice & Coaching
Podium
Interview
Board Report Coach
Audit Trial
New
Scenario Bank
New
AI Cert Prep
Watch a War Room
Simulations
Cyber War Room
Virtual SOC
M&A Due Diligence
New
The Cut — Weekly Budget Siege
Budget Siege
The Mandate — CISO Budget Siege
New
Hands-on Labs
Projects — Tracks + Certificate
New
Challenge Ladder
New
All Labs
New
Firewall Rule Lab
New
Egress Proxy Lab
New
Email Authentication Lab
New
Conditional Access Lab
New
Cloud Posture Lab
New
Detection Lab
New
SOC Case Triage Lab
IR Playbook Lab
New
Forensics Lab
New
Abliteration Lab (sim)
New
Certificate Triage Lab
New
Certificate Chain Lab
New
PKI Hierarchy Lab
New
Cert Revocation Lab
New
Cert Rotation War Room
New
Cert Pinning Lab
New
mTLS Handshake Lab
New
TLS Hardening Lab
New
CSR Builder & Auditor
New
Hashing & Integrity Lab
New
HMAC & Message Auth Lab
New
AES-GCM Encryption Lab
New
Digital Signature Lab
New
Password Storage Lab
New
JWT Attack & Defense Lab
New
Key Lifecycle Lab
New
ASN.1 / DER Decoder Lab
New
CT Log Monitoring Lab
New
Entropy & Weak-RNG Lab
New
TLS Handshake Lab
New
Identity & Access
Authentication Method Lab
New
OAuth Grant Lab
New
Federation Lab
New
Session Security Lab
New
MFA Bypass Lab
New
Passkey & WebAuthn Lab
New
RBAC / ABAC Lab
New
IAM Privilege-Escalation Lab
New
Token Lifecycle Lab
New
OAuth Consent Phishing Lab
New
Account Takeover Triage Lab
New
Password Policy Lab
New
Credential Stuffing Defense Lab
New
SSO Misconfiguration Lab
New
API & Service Auth Lab
New
Kerberos Attack Lab
New
SCIM Lifecycle Lab
New
ITDR Lab
New
Step-Up Auth Lab
New
Directory Security Lab
New
PCI DSS & Readiness
PCI Checklist
New
PCI Readiness Score
New
SAQ Selector
Gap Assessor
QSA Interview
Essential Eight Score
New
NIST CSF 2.0 Score
New
NIST CSF 2.0 Toolkit
Ransomware Readiness
New
Cyber Insurance Score
New
Zero Trust Maturity
New
Security Ops Maturity Model
New
Studios
Threat Model Studio
Architecture Studio
Design Review Workbench
Org Designer
Attack Path Simulator
Risk Register
Control Library
New
Cyber PMO
AI Security
Abliterated Models, Explained
New
RAG & Vector DB Hardening
New
Malicious MCP Scanner
New
AI Governance Policy Pack
New
AI Threat Model Builder
New
Agent Governance Plane
New
MCP Server Risk
New
LLM Security (OWASP)
New
AI Footprint Scanner
New
Reputation Checker
New
LiteLLM Checker
New
AI Cost Optimizer
New
AI Adoption Hub
New
LLM Threat Model
New
MCP Security Linter
New
Agent Builder + Red-Team
New
In-Browser LLM Sandbox
New
Embeddings Explorer
New
OT / ICS Security
Purdue Model Builder
New
Cold-Chain War Room
New
IEC 62443 SL Calculator
New
ICS Threat-Model Builder
New
OT Protocol Explorer
New
OT Device Lookup
New
OT Compliance Mapper
New
OT Conduit Linter
New
OT Asset Ranker
New
BMS Config Auditor
New
OT Downtime Calculator
New
ICS Traffic Analyzer
New
OT Exposure Analyzer
New
ICS Advisory Explorer
New
PLC Tamper Lab
New
Modbus Attack Range
New
SIS Defense Lab
New
Alarm-Flood Triage Lab
New
AI BOM Suite
AI BOM Generator
AIBOM Validator
ML-BOM Converter
AI Dependency Scanner
AIBOM Diff
AIBOM Template
Model Risk Scanner
AIBOM vs SBOM
Abliterated Model Risk
Model License Checker
Threat Intelligence
APT & Threat-Intel Feed
APT Knowledge Graph
APT Naming Rosetta Stone
New
120+ Architecture Diagrams
Risk & Cost Calculators
Breach Cost Index
New
Breach Cost by Domain
New
Breach Cost Calculator
New
Cyber Insurance Premium Calculator
New
Security Budget Benchmark
New
Breach Notification Clock
New
FAIR Risk Calculator
New
Identity Risk Calculator
CVSS Calculator (v3.1 & v4.0)
New
Vendor Risk Ranking
New
Cyber Insolvency Risk
New
Free Assessments & Simulators
SOC Triage Trainer
Find the Bad Friend
Would You Pick Up?
Free Utilities
Compress PDF
New
Compress MP4
New
Password Token Half-Life
Security APIs Directory
New
Developer & Security Utilities
Password Generator
New
What Is My IP
New
Morse Code Translator
New
Binary Translator
New
Regex Tester
New
Caesar Cipher
New
Vigenère Cipher
New
ROT13 Encoder / Decoder
New
DNS Lookup
New
WHOIS Lookup
New
Prompt Injection Tester
New
AI Security Risk Mapper
New
MAC Address Lookup
New
CISO Role Builder
New
Number Base Converter
New
ASCII Table
New
XML Formatter
New
JSON ⇄ CSV Converter
New
Random String Generator
New
Hash Identifier
New
Diff Checker
New
SQL Formatter
New
Cron Expression Generator
New
YAML Validator & Converter
New
HTML Entity Encoder
New
TOTP Generator
New
IP Range Calculator (CIDR ⇄ Range)
New
JWT Generator
New
Punycode / IDN Converter
New
CSR Generator (PKCS#10)
New
Slugify (Text to URL Slug)
New
Secret Scanner
New
Leaked Credential Response
New
IAM Policy Analyzer
New
S3 Bucket Policy Auditor
New
Key Rotation Planner
New
Security Group Auditor
New
Trust Policy Auditor
New
CSPM Readiness Scorecard
New
CIS AWS Benchmark Checklist
New
Incident Response Plan Builder
New
Penetration Test Scoping
New
Vendor Risk Scorecard
New
SOC 2 Readiness Checklist
New
ISO 27001 Readiness Checklist
New
RBAC Matrix Builder
New
SSRF Defense Checklist
New
Subnet / CIDR Calculator
New
Hash Generator (MD5/SHA)
New
Base64 Encode / Decode
New
URL Encode / Decode
New
JWT Decoder
New
JSON Formatter & Validator
New
Epoch / Unix Timestamp Converter
New
UUID Generator
New
Password Strength Checker
New
User-Agent Parser
New
SSL Certificate & CSR Decoder
New
Bcrypt Generator & Verifier
New
Markdown to HTML
New
Hypervisor Comparison
New
KVM Hardening Checklist
New
VM Escape Triage Lab
New
Hypervisor Hardening Console
New
Multi-Tenant Guest Isolation
New
Device-Emulation Attack Surface
New
Cross-VM Side-Channel Lab
New
Isolation Picker (Firecracker/gVisor)
New
Secure Live Migration Lab
New
Nested Virtualization Risk Lab
New
Stuxnet Reconstruction Lab
New
Industroyer Substation Lab
New
SCADA Protocol Weakness Lab
New
HMI & SCADA Software Lab
New
TRITON / TRISIS Safety Lab
New
PIPEDREAM / INCONTROLLER Lab
New
SCADA Segmentation Map
New
SCADA Firmware Triage
New
ISO 27090 Threat-Mapping Lab
New
ISO 42001 Gap-Assessment Lab
New
Agent Harness Attack-Surface Lab
New
Recursive Harness Change-Control Lab
New
Agent Prompt-Injection Lab
New
Agent Tool-Scope Lab
New
Agent Egress-Containment Lab
New
Agent Subagent Delegation & Trust Lab
New
Agent Memory Governance Lab
New
Agent Eval Integrity Lab
New
Agent Plugin Supply-Chain Lab
New
Self-Improving Agent Audit Lab
New
Custom Agent Harness Designer
New
AI Agent Benchmark Explorer
New
Agent Harness Comparator
New
Agent Pattern Picker
New
Recursion Budget Simulator
New
Context-Window Budget Visualizer
New
Agent Topology Visualizer
New
Eval Rubric-Chain Builder
New
Multi-Model Agent Cost Calculator
New
Harness Playground
New
Calendar Invite Inspector
New
Calendar Invite Triage
New
Ransom-Note Interpreter
New
Ransomware Payment Decision Aid
New
Ransomware Readiness Scorecard
New
Release Pipeline Integrity Scorecard
New
EU AI Act Classifier
New
AI Impact Assessment
New
AI Fairness & Explainability Assessment
New
Secure AI Lifecycle Self-Assessment
New
AI Audit & Assurance Readiness
New
AI Observability Readiness Scorecard
New
CA Compromise Readiness Scorecard
New
Indirect Injection Lab
New
Insecure Output Lab
New
RAG Poisoning Lab
New
MCP Rug-Pull Lab
New
Data Extraction & Leakage Lab
New
Model Backdoor & Adversarial-ML Lab
New
Policy Gateway Lab
New
Red-Team CI Lab
New
Agent-IR Tabletop Lab
New
Edge AI Security Checklist
New
Cyber Insurance Comparison
New
SOC Maturity Assessment
New
AI RE Tool Safety
New
ISO 27090 Readiness
New
Leak-Forum CTI Lab
New
Agent Trace Triage Lab
New
Telemetry Privacy & Span-Redaction Checklist
New
Scanners & Library
5 Security Scanners
Resume Review
25 Templates
GRC Starter Kit
Free Course Library
New
Video Library
New
Boardroom & Governance
Board & Governance Templates
New
Materiality Call Lab
New
CISO Personal Liability Lab
New
Regulator Interview Lab
New
Audit Committee Q&A Lab
New
Governance Disclosure Lab
New
Risk-to-Dollars Lab
New
Business Case / ROI Pitch Lab
New
Risk Appetite Statement Lab
New
Cyber Insurance Renewal Lab
New
Board Metrics Selection Lab
New
The Ransom Decision (Board)
New
Crisis Comms Lab
New
Escalation Threshold Lab
New
Nation-State Notification Lab
New
Tabletop Facilitation Lab
New
Vendor-Breach Response Lab
New
M&A Day-1 Security Lab
New
Regulatory Horizon Lab
New
AI Governance Board Lab
New
Resilience / BIA Lab
New
Arcade
Cyber Arcade
Stay Lowkey 🔒
Stay Lowkey Hub
New
Vibe Check Your Apps
Sus or Legit?
Who's the Rat?
Who's Watching You
Don't Get Caught Slipping
Ask Bytie
The Lowdown 📊
Community
Chat
New
Community Polls
New
Cyber & AI Memes
New
Get Started Free
Free Scorecard
What's New
Examples
Blog
Pricing
Contact
Refer a Friend
Public Stats
Sign in
Sign up free
Home
War Room
🧭
Explore
Tools
Me
Menu
May 2026 — Articles & Guides | PlayCISO Blog · PlayCISO