May 31, 2026

In this issue

Threat actors are abusing ChatGPT share links to serve fake OpenAI outage pages that deliver malware disguised as the desktop app.

@ngalog bypassed Shopify's patch for a prior email-confirmation bug and verified arbitrary emails to access accounts they didn't own.

Microsoft issued an out-of-band SharePoint patch, signaling active exploitation or critical severity outside the normal Patch Tuesday cycle.