people · May 17, 2026
TENEXSignal 05/14/2026 Details Supply Chain Worm and AI Defenses
Share the canonical public link.
TENEX.AI published its weekly intelligence report on May 14, 2026 covering the Mini Shai-Hulud supply chain worm that compromised over 400 npm and PyPI package versions in five hours. The report highlights Microsoft's MDASH agentic system discovering 16 previously unknown Windows vulnerabilities including four critical RCEs with 96 percent recall on historical cases. Nitrogen ransomware struck Foxconn North American facilities exfiltrating 8TB of data. Tenex recommends immediate actions including auditing dependency lockfiles for May 11-12 installs and patching CVE-2026-40361 zero-click Outlook RCE within 24 hours. The report notes Microsoft on pace to patch over 1,000 CVEs in 2026 driven by AI discovery.