Cybersecurity Brief – 2026-05-31

Major Incidents or Breaches

Palo Alto Networks confirmed that threat actors are actively exploiting a PAN-OS GlobalProtect authentication bypass vulnerability (CVE-2024-3400), targeting corporate networks to gain unauthorised access ^[1].
A cybercrime group has claimed responsibility for hacking Mike Lindell’s MyPillow, though further details on the breach are limited ^[5].

Newly Discovered Vulnerabilities

A local privilege escalation vulnerability, dubbed ‘CIFSwitch’, has been identified in the Linux kernel, allowing attackers to obtain root access by abusing the kernel’s key request mechanism. This flaw affects multiple Linux distributions ^[2].
Exploit code has been published for a critical remote code execution vulnerability in Flowise, which allows attackers to execute arbitrary code on self-hosted servers by tricking users into importing malicious chatflows ^[7].

Notable Threat Actor Activity

Russian intelligence operatives are reported to be intensifying efforts to acquire Western technology by creating fake companies, recruiting intermediaries, and deploying cyber spies and hackers to gather information, including data potentially useful for attacks on critical infrastructure ^[6].

Trends, Tools, or Tactics of Interest

Reports indicate a ransomware group has begun physically stealing data in person as part of their operations, marking a shift in tactics beyond traditional digital intrusions ^[5].