Supply chain chaos, old bugs, smarter phishing, and botnets everywhere — here’s what broke the internet this week.
Laravel-Lang compromise tagged 700+ versions on May 22–23, 2026, triggering PHP stealers that exfiltrate credentials.
Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.