Daily Threat Briefing — May 06, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of May 6, 2026.

1. New stealthy Quasar Linux malware targets software developers
   — Bleeping Computer
   
   A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit, backdoor, and cred…
2. Instructure hacker claims data theft from 8,800 schools, universities
   — Bleeping Computer
   
   The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million data records for students and staff f…
3. Trellix Source Code Breach Highlights Growing Supply Chain Threats
   — Dark Reading
   
   Info is scant, but such breaches can reveal where a security product's controls are located and how detections are designed, giving attacker…
4. DAEMON Tools trojanized in supply-chain attack to deploy backdoor
   — Bleeping Computer
   
   Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of systems that downloaded …
5. Student hacked Taiwan high-speed rail to trigger emergency brakes
   — Bleeping Computer
   
   A 23-year-old university student in Taiwan was arrested for interfering with the TETRA communication system used by the country's high-speed…
6. Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
   — The Hacker News
   
   The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including…
7. DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware
   — The Hacker News
   
   A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, accordin…
8. Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk
   — Dark Reading
   
   A proof-of-concept exploit (PoC) shows how someone with admin privileges can exploit the issue to steal passwords, and thus use them to enga…
9. Cleartext Passwords in MS Edge? In 2026?, (Mon, May 4th)
   — SANS ISC
   
   Yup, that is for real.
10. China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions
    — The Hacker News
    
    A sophisticated China-nexus advanced persistent threat (APT) group has been attributed to attacks targeting government entities in South Ame…
11. The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed
    — The Hacker News
    
    Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind: a …
12. How the Story of a USB Penetration Test Went Viral
    — Dark Reading
    
    Two decades ago Dark Reading posted its first blockbuster — a column by a pen tester who sprinkled rigged thumb drives around a credit uni…

Generated by HiveNet.ai Threat Intelligence Platform · May 6, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC