CVE-2026-26030

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 20, 2026

Last Seen

May 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension68.3

On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group, resulted in the exfiltration of approximately 3,800 internal repositories. GitHub's...

PromptSpy: First Android Malware Utilizing Generative AI Discovered40.3

ESET researchers have identified PromptSpy, the first Android malware to incorporate generative AI, specifically Google’s Gemini, in its execution flow. This malware utilizes AI to manipulate the user interface and maintain persistence on infected devices, capturing sensitive data and preventing uni...