Cleartext – May 15, 2026

Cleartext – May 15, 2026
Daily cybersecurity briefing for CISOs and security leaders.
🎧 Listen to this episode (https://storage.googleapis.com/cleartext-podcast/audio/episode_2026-05-15.mp3)

Episode Summary
Today's episode covers 9 stories across 5 topic areas, including: Pentagon cyber official calls advanced AI ‘revolutionary warfare’; Mustang Panda Linked to New Modular FDMTP Backdoor; Major tech manufacturer Foxconn confirms cyberattack hit North American factories.

Stories Covered

🌍 Geopolitical

Pentagon cyber official calls advanced AI ‘revolutionary warfare’ (https://cyberscoop.com/pentagon-cyber-ai-revolutionary-warfare-mythos/)
CyberScoop · May 14 · Relevance: ███████░░░ 7/10
Why it matters to CISOs: Pentagon framing advanced AI as 'revolutionary warfare' signals escalating national security posture that will shape defense contracting requirements, threat models, and potentially new compliance mandates for critical infrastructure CISOs.


• Paul Lyons, principal deputy assistant secretary for cyber policy, characterized advanced AI as 'revolutionary warfare'


• Discussion emphasized the importance of offensive cyber capabilities alongside AI


• Reflects DoD's evolving posture on AI-driven threats that will influence defense sector security requirements


📖 Read full article (https://cyberscoop.com/pentagon-cyber-ai-revolutionary-warfare-mythos/)

Mustang Panda Linked to New Modular FDMTP Backdoor (https://www.bankinfosecurity.com/mustang-panda-linked-to-new-modular-fdmtp-backdoor-a-31696)
BankInfoSecurity · May 15 · Relevance: ███████░░░ 7/10
Why it matters to CISOs: Mustang Panda's evolving modular tooling targeting APAC governments demonstrates continued Chinese state-sponsored espionage sophistication — CISOs with APAC operations or government clients should update threat models and detection rules.


• Chinese nation-state group Mustang Panda deployed new modular FDMTP backdoor in cyberespionage campaign


• Campaign targeted Asia-Pacific government organizations


• Demonstrates evolution in persistence techniques and modular malware capabilities


📖 Read full article (https://www.bankinfosecurity.com/mustang-panda-linked-to-new-modular-fdmtp-backdoor-a-31696)

🔓 Data Breach

Major tech manufacturer Foxconn confirms cyberattack hit North American factories (https://cyberscoop.com/foxconn-cyberattack-disrupts-north-america-factories/)
CyberScoop · May 14 · Relevance: ████████░░ 8/10
Why it matters to CISOs: Foxconn's ransomware attack with 8TB of customer data exfiltrated is a major supply chain risk event — CISOs whose organizations source from Foxconn need to assess downstream data exposure and contractual obligations.


• Nitrogen ransomware group claimed responsibility, alleging theft of 8TB of data spanning 11 million files from top customers


• Attack disrupted Foxconn's North American manufacturing facilities


• Part of a broader trend: 600+ ransomware attacks on manufacturers in 2026 so far


📖 Read full article (https://cyberscoop.com/foxconn-cyberattack-disrupts-north-america-factories/)

OpenAI confirms security breach in TanStack supply chain attack (https://www.bleepingcomputer.com/news/security/openai-confirms-security-breach-in-tanstack-supply-chain-attack/)
BleepingComputer · May 14 · Relevance: ████████░░ 8/10
Why it matters to CISOs: The TanStack supply chain compromise hitting OpenAI employees underscores that even top AI firms are vulnerable to npm/PyPI poisoning — CISOs should audit developer toolchain dependencies and code-signing certificate integrity.


• Two OpenAI employee devices were breached via malicious TanStack npm/PyPI packages


• OpenAI rotated code-signing certificates as a precaution; says no user data or production systems affected


• Attack impacted hundreds of npm and PyPI packages in a broad supply chain campaign


📖 Read full article (https://www.bleepingcomputer.com/news/security/openai-confirms-security-breach-in-tanstack-supply-chain-attack/)

Instructure Pays ShinyHunters Ransom to Little Likely Return (https://www.bankinfosecurity.com/blogs/instructure-pays-shinyhunters-ransom-to-little-likely-return-p-4118)
BankInfoSecurity · May 15 · Relevance: ███████░░░ 7/10
Why it matters to CISOs: Instructure's ransom payment for children's data with dubious 'data destruction confirmation' is a cautionary tale for CISOs facing extortion — paying rarely ensures deletion, and the reputational and legal exposure persists.


• Instructure (Canvas learning platform) paid ShinyHunters ransom after breach involving children's personal data


• Company told victims it received 'digital confirmation of data destruction' — a promise threat actors routinely break

...

Видео Cleartext – May 15, 2026 канала Michael Coates