Weekly Cyber Security News 21/05/2026

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

A couple of weeks ago I was saying to someone I wondered if Drupal was still around. Not the best way to be reminded:

• Clear your calendar, Drupal user: You have a critically urgent patch to install

Be careful where you get your extensions as usual:

• GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension

A bit of a bummer. As usual, anything pops up unexpected; don’t click on it right?

• Do fear the Reaper – stealer swipes macOS users” passwords, wallets, then backdoors them