May 2026 Security Briefing Highlights Credential Exposures and Fast-Moving Attacks
Summary
Sysdig’s May 2026 briefing covers ShinyHunters’ claim of Canvas data theft, a TeamPCP supply-chain attack, exposed CISA contractor credentials, an LLM-driven marimo intrusion, rapid exploitation of AI-related flaws, and other cloud security findings.
Key points
- ShinyHunters claimed it exfiltrated data on about 275 million Canvas users; Instructure said the breach was contained, and the group later defaced login portals for more than 300 institutions.
- TeamPCP’s backdoored Nx Console extension was available on the VS Code Marketplace for 18 minutes. A GitHub employee downloaded it, and the article reports that about 3,800 repositories were cloned.
- A CISA contractor disabled a safeguard against publishing secrets to public repositories, exposing AWS GovCloud credentials and other material for six months; the article says there were no indications of compromise.
- Sysdig TRT described an LLM-driven intrusion using marimo flaw CVE-2026-39987 to steal cloud credentials, access an SSH bastion, and exfiltrate PostgreSQL configuration in under an hour.
- A scanner probed a PraisonAI authentication flaw (CVE-2026-44338) within four hours of disclosure. In a separate Langflow incident, attackers used an unauthenticated RCE (CVE-2026-33017) and NATS-based command-and-control infrastructure.
- Sysdig TRT reported an Azure VMAccess detection gap because extension names can be chosen freely; Microsoft does not consider the issue a security vulnerability.
- The roundup also covers the DirtyFrag Linux kernel vulnerability chain, a breach affecting a German medical billing processor, and a false-flag ransomware operation attributed to MuddyWater.
Article Details
- Event Type
- Multiple cybersecurity incidents involving data breaches, exposed credentials, supply-chain compromise, and rapid exploitation of vulnerabilities.
- Impact
- ShinyHunters claimed to have exfiltrated Canvas data affecting approximately 275 million people; Instructure said the breach was contained, and ShinyHunters later defaced login portals for more than 300 institutions. TeamPCP’s backdoored Nx Console extension led to approximately 3,800 cloned repositories being taken. A CISA contractor’s configuration error exposed AWS GovCloud credentials and other sensitive data for six months, with no indications of compromise reported. Other incidents included theft of cloud credentials and exfiltration of an internal PostgreSQL configuration through a marimo vulnerability, alongside probing or exploitation of vulnerabilities in PraisonAI and Langflow.
MITRE ATT&CK
T1005 · Data from Local SystemSensitive files, tokens, passwords, logs, and credentials were exposed in the CISA contractor incident.T1021.004 · SSHThe attacker used a recovered private key to authenticate to an SSH bastion server.T1078 · Valid AccountsThe marimo attacker reused stolen cloud credentials to access additional systems.T1105 · Ingress Tool TransferAfter exploiting Langflow, the attacker downloaded a Python worker and a Go binary to the compromised environment.T1190 · Exploit Public-Facing ApplicationAttackers exploited publicly exposed vulnerabilities in services including Canvas, marimo, PraisonAI, and Langflow to gain initial access.T1213 · Data from Information RepositoriesAttackers exfiltrated an internal PostgreSQL configuration and approximately 3,800 cloned repositories.T1588.001 · MalwareThe article associates malicious tooling, including a backdoored Nx Console extension and worker binaries, with the attacks.
CVE
CVE-2026-33017langflow-ai · langflowThe attacker began with an unauthenticated RCE in Langflow (CVE-2026-33017), then downloaded a Python worker and a Go binary over the course of 30 minutes.CVE-2026-39987marimo-team · marimo[Vulnerabilities ] exploited or referenced CVEs – CVE-2026-39987, CVE-2026-44338, and other 2 CVEsCVE-2026-43284Linux · Linux; Red Hat · NVIDIA for RHEL 10; +28 moreDirtyFrag: This is a local escalation vulnerability chain (CVE-2026-43284, CVE-2026-43500) that was published ahead of patches being released in early May.CVE-2026-43500Linux · LinuxDirtyFrag: This is a local escalation vulnerability chain (CVE-2026-43284, CVE-2026-43500) that was published ahead of patches being released in early May.CVE-2026-44338Praison · Praisonai[Vulnerabilities ] exploited or referenced CVEs – CVE-2026-39987, CVE-2026-44338, and other 2 CVEs
Threat Actors
MuddyWaterThe article attributes a false-flag operation initially appearing to be a Chaos ransomware incident to MuddyWater, reporting a shift to social engineering and data exfiltration.ShinyHuntersThe article reports that ShinyHunters gained access to a vulnerable teacher account program, claimed to have exfiltrated Canvas data, and later defaced login portals for more than 300 institutions.TeamPCPThe article reports that TeamPCP published a backdoored Nx Console extension on the VS Code Marketplace; a GitHub employee downloaded it during its brief availability, after which approximately 3,800 repositories were cloned.
Vendors
GitHubTeamPCP published a backdoored Nx Console extension on the VS Code Marketplace, and a GitHub employee downloaded it during the brief exposure window.Instructure#ShinyHuntersMicrosoftThey deployed a backdoored version of the Nx Console on the Microsoft Visual Studio Code (VS Code) Marketplace, which was only live for 18 minutes before being taken down.
Products
Canvas#ShinyHuntersLangflow#ShinyHuntersLinux kernelThese CVEs affect the Linux kernel’s xfrm-ESP and RxRPC subsystems, therefore impacting nearly every major distro running kernels since 2017.Marimo#ShinyHuntersNATS#ShinyHuntersNx ConsoleTeamPCP published a backdoored Nx Console extension on the VS Code Marketplace, and a GitHub employee downloaded it during the brief exposure window.PostgreSQLSysdig TRT reported the first LLM-driven intrusion it had captured, which used a public marimo notebook flaw to steal cloud credentials and exfiltrate PostgreSQL configuration.VSCodeThey deployed a backdoored version of the Nx Console on the Microsoft Visual Studio Code (VS Code) Marketplace, which was only live for 18 minutes before being taken down.